
How Do I Stop Bots From Spamming My Contact and Signup Forms?
Small-site owners on Hacker News describe the same fight: a contact form full of junk, a signup form running up an SMS bill for numbers that never convert. The fixes that hold up are boring: a hidden field, a free widget, a rate limit keyed to the account instead of the IP. Here is the order I would add them in, and where the real money risk hides.

