{"id":11607,"date":"2026-11-12T07:43:46","date_gmt":"2026-11-12T07:43:46","guid":{"rendered":"https:\/\/www.clickcease.com\/blog\/?p=11607"},"modified":"2026-11-12T09:12:21","modified_gmt":"2026-11-12T09:12:21","slug":"lead-shield-hubspot-forms","status":"publish","type":"post","link":"https:\/\/www.clickcease.com\/blog\/lead-shield-hubspot-forms\/","title":{"rendered":"How to Stop Fake Leads and Spam on HubSpot Forms (2026 Guide)"},"content":{"rendered":"\n<link href=\"https:\/\/fonts.googleapis.com\/css2?family=Inter:wght@400;500;600;700&amp;display=swap\" rel=\"stylesheet\">\n\n<!-- Direct answer box \u2014 GEO\/AIO -->\n<div style=\"background:#fff;border:2px solid #0d1b2a;border-radius:10px;padding:18px 22px;margin-bottom:20px;\">\n  <p style=\"font-size:10px;font-weight:700;text-transform:uppercase;letter-spacing:.1em;color:#6b7280;margin:0 0 8px;\">The short answer<\/p>\n  <p style=\"font-size:15px;color:#1a1f36;margin:0;line-height:1.7;font-weight:500;\">HubSpot&#8217;s built-in tools, such as reCAPTCHA and blocking free email domains, filter out obvious spam. To catch fake leads that look real, add ClickCease Lead Shield. It checks every HubSpot form submission on the visitor&#8217;s behavior plus email and phone validation, then writes a Malicious, Suspicious or Benign verdict and a recommended action to the contact, so you can filter, route and report on real leads only.<\/p>\n<\/div>\n\n<!-- TL;DR -->\n<div style=\"background:#f9fafb;border-left:4px solid #0d1b2a;border-radius:0 8px 8px 0;padding:18px 22px;margin-bottom:28px;\">\n  <p style=\"font-size:10px;font-weight:700;text-transform:uppercase;letter-spacing:.1em;color:#6b7280;margin:0 0 10px;\">TL;DR<\/p>\n  <ul style=\"padding-left:18px;margin:0;\">\n    <li style=\"font-size:14px;color:#374151;margin-bottom:6px;line-height:1.6;\">ClickCease Lead Shield protects <strong>standard HubSpot forms<\/strong> by connecting a CHEQ app to your HubSpot account. Setup takes a few minutes in Lead Shield \u2192 Form Management.<\/li>\n    <li style=\"font-size:14px;color:#374151;margin-bottom:6px;line-height:1.6;\">Every protected submission gets a verdict (Malicious, Suspicious or Benign) and a recommended action (Deny, Challenge or Accept), written to the contact as <strong>cq_<\/strong> properties you can filter and report on.<\/li>\n    <li style=\"font-size:14px;color:#374151;margin-bottom:6px;line-height:1.6;\">It works alongside HubSpot&#8217;s own spam filters: they stop obvious junk, Lead Shield scores what gets through.<\/li>\n    <li style=\"font-size:14px;color:#374151;margin-bottom:6px;line-height:1.6;\">Start in Monitoring Mode to review verdicts in ClickCease before anything is written to HubSpot.<\/li>\n    <li style=\"font-size:14px;color:#374151;margin-bottom:0;line-height:1.6;\">Lead Shield is included in every ClickCease plan, with no upgrade needed; protected submissions count toward your plan\u2019s usage.<\/li>\n  <\/ul>\n<\/div>\n\n<p>For many B2B teams, HubSpot is where lead generation ends up: the forms, the contacts, the workflows and the sales handoff. That also makes it where fake leads do the most damage. A bot fills in a demo request, a throwaway email lands in a nurture sequence, a sales rep calls a number that doesn&#8217;t connect, and your reports count all of it as pipeline.<\/p>\n\n<p>This guide covers what HubSpot already does to stop form spam, where those filters stop, and how to add ClickCease Lead Shield so every HubSpot form submission carries a verdict you can act on. For the bigger picture across every platform, see our <a href=\"https:\/\/www.clickcease.com\/blog\/fake-leads\/\" style=\"color:#1a3a5c;font-weight:600;\">guide to fake leads<\/a>.<\/p>\n\n<h2>What does HubSpot already do to stop form spam?<\/h2>\n\n<p>HubSpot includes several spam controls for its forms, and they&#8217;re worth turning on. According to <a href=\"https:\/\/knowledge.hubspot.com\/forms\/prevent-spam-form-submissions\" style=\"color:#1a3a5c;font-weight:600;\">HubSpot&#8217;s knowledge base<\/a>, you can:<\/p>\n\n<ul style=\"padding-left:20px;margin:0 0 20px;\">\n  <li style=\"margin-bottom:8px;line-height:1.7;\"><strong>Turn on CAPTCHA.<\/strong> HubSpot forms use Google&#8217;s invisible reCAPTCHA v2. Visitors Google considers suspicious must solve a challenge before submitting.<\/li>\n  <li style=\"margin-bottom:8px;line-height:1.7;\"><strong>Block email domains.<\/strong> Block specific domains or HubSpot&#8217;s list of free email providers (Starter plans and above).<\/li>\n  <li style=\"margin-bottom:8px;line-height:1.7;\"><strong>Use gibberish detection.<\/strong> Flag submissions full of random characters as spam (Professional and Enterprise plans).<\/li>\n  <li style=\"margin-bottom:0;line-height:1.7;\"><strong>Exclude known IPs and filter known bots<\/strong> from form analytics.<\/li>\n<\/ul>\n\n<p>These filters are good at the obvious cases: crude bots, gibberish, and free-email addresses on B2B forms. What they don&#8217;t do is judge the submission as a whole. A bot that behaves like a person, or a real-looking business email and phone number that belong to nobody, can pass all of them. And because they work by blocking or marking spam, they don&#8217;t give you a graded signal to route borderline leads differently.<\/p>\n\n<h2>What is ClickCease Lead Shield for HubSpot?<\/h2>\n\n<p><strong>Lead Shield<\/strong> is ClickCease&#8217;s form and lead fraud protection. For each protected HubSpot form submission, it combines three checks into one final risk score:<\/p>\n\n<ul style=\"padding-left:20px;margin:0 0 20px;\">\n  <li style=\"margin-bottom:8px;line-height:1.7;\"><strong>Behavior on your site<\/strong>, from the ClickCease tag: whether the visitor acted like a real person or like automation.<\/li>\n  <li style=\"margin-bottom:8px;line-height:1.7;\"><strong>Email validation<\/strong>: whether the address entered is real and trustworthy.<\/li>\n  <li style=\"margin-bottom:0;line-height:1.7;\"><strong>Phone validation<\/strong>: whether the number entered is real and trustworthy.<\/li>\n<\/ul>\n\n<p>That score becomes a verdict and a recommended action:<\/p>\n\n<div style=\"display:flex;flex-wrap:wrap;gap:8px;margin:16px 0 20px;\">\n  <span style=\"display:inline-block;background:#e6f7f1;color:#007a52;font-size:12px;font-weight:700;padding:4px 12px;border-radius:20px;\">Benign \u2192 Accept<\/span>\n  <span style=\"display:inline-block;background:#fffbeb;color:#b45309;font-size:12px;font-weight:700;padding:4px 12px;border-radius:20px;\">Suspicious \u2192 Challenge<\/span>\n  <span style=\"display:inline-block;background:#fdecea;color:#d93025;font-size:12px;font-weight:700;padding:4px 12px;border-radius:20px;\">Malicious \u2192 Deny<\/span>\n<\/div>\n\n<p>Lead Shield runs on the same CHEQ enterprise engine that protects hundreds of enterprise accounts, including Fortune 500 companies. It also works on WordPress forms; if part of your lead flow runs through Gravity Forms, WPForms or Contact Form 7, see our <a href=\"https:\/\/www.clickcease.com\/blog\/lead-shield-wordpress-forms\/\" style=\"color:#1a3a5c;font-weight:600;\">guide to Lead Shield for WordPress<\/a>.<\/p>\n\n<div style=\"background:#f0f7ff;border-left:4px solid #1a3a5c;border-radius:0 8px 8px 0;padding:16px 20px;margin:24px 0;\">\n  <p style=\"margin:0;font-size:14px;line-height:1.7;color:#1a1f36;\"><strong>Which HubSpot forms are covered?<\/strong> Lead Shield supports <strong>standard HubSpot forms<\/strong>. HubSpot pop-up forms and non-HubSpot forms aren&#8217;t covered by the HubSpot connection.<\/p>\n<\/div>\n\n<h2>How do you set up Lead Shield on HubSpot?<\/h2>\n\n<p>Lead Shield is included in every ClickCease plan, with no upgrade needed; protected submissions count toward your plan\u2019s usage. Setup takes a few minutes. The full walkthrough is in the <a href=\"https:\/\/helpcenter.clickcease.com\/en-us\/articles\/16802204-setting-up-lead-shield-for-hubspot\" style=\"color:#1a3a5c;font-weight:600;\">ClickCease help center<\/a>; here&#8217;s the short version:<\/p>\n\n<ol style=\"padding-left:20px;margin:0 0 20px;\">\n  <li style=\"margin-bottom:10px;line-height:1.7;\"><strong>Open Form Management.<\/strong> In your ClickCease dashboard, go to <strong>Lead Shield \u2192 Form Management<\/strong>.<\/li>\n  <li style=\"margin-bottom:10px;line-height:1.7;\"><strong>Connect your HubSpot account.<\/strong> Click <strong>Add Account<\/strong>. The CHEQ app installs and a HubSpot authorization page opens. Sign in, choose the HubSpot account you want to protect and click <strong>Connect app<\/strong>. You can connect as many HubSpot accounts as you need.<\/li>\n  <li style=\"margin-bottom:10px;line-height:1.7;\"><strong>Choose which forms to protect.<\/strong> Protect forms one by one, or turn on automatic protection so every form is covered, including forms you add later.<\/li>\n  <li style=\"margin-bottom:10px;line-height:1.7;\"><strong>Choose what to validate.<\/strong> Email and phone are both validated by default. Untick either field if you only collect one.<\/li>\n  <li style=\"margin-bottom:0;line-height:1.7;\"><strong>Save.<\/strong> Lead Shield starts checking submissions on the protected forms.<\/li>\n<\/ol>\n\n<div style=\"background:#f0f7ff;border-left:4px solid #1a3a5c;border-radius:0 8px 8px 0;padding:16px 20px;margin:24px 0;\">\n  <p style=\"margin:0;font-size:14px;line-height:1.7;color:#1a1f36;\"><strong>Good to know:<\/strong> connecting the CHEQ app lets Lead Shield add hidden fields to the forms you protect; they&#8217;re needed for validation and are removed if you disconnect. HubSpot may also show a warning that the app is unverified and ask you to type &#8220;I accept the risk.&#8221; That label means the app hasn&#8217;t yet completed HubSpot&#8217;s partner review; it uses HubSpot&#8217;s standard secure authorization, and you can disconnect at any time. <a href=\"https:\/\/helpcenter.clickcease.com\/en-us\/articles\/16802209-why-does-hubspot-warn-me-about-connecting-the-cheq-app\" style=\"color:#1a3a5c;font-weight:600;\">More on the warning<\/a>.<\/p>\n<\/div>\n\n<h2>Should you start in Monitoring Mode?<\/h2>\n\n<p>Usually, yes. <strong>Monitoring Mode<\/strong> lets you watch Lead Shield work before it changes anything in HubSpot. Every lead is still evaluated exactly as normal, but no verdicts or fields are written back to HubSpot; you review the results in your ClickCease dashboard instead.<\/p>\n\n<p>Use that window to shape your policy: allow or block specific email domains in <strong>Custom Settings<\/strong>, and switch individual detection signals on or off in <strong>Signal Management<\/strong>. When the results match what you&#8217;d expect, turn Monitoring Mode off and the verdicts start flowing into HubSpot.<\/p>\n\n<p>The toggle sits at the top of the HubSpot connection section in Form Management. Monitoring Mode is set separately for HubSpot and WordPress, so you can test one while the other is already live.<\/p>\n\n<h2>Where do Lead Shield verdicts appear in HubSpot?<\/h2>\n\n<p>Lead Shield writes its results to the contact as <strong>cq_<\/strong> properties. To see them, go to <strong>CRM \u2192 Contacts \u2192 Edit columns<\/strong> and add the ones you need:<\/p>\n\n<div style=\"overflow-x:auto;-webkit-overflow-scrolling:touch;margin:22px 0;border-radius:10px;box-shadow:0 1px 3px rgba(0,0,0,.08);\">\n<table style=\"width:100%;border-collapse:collapse;font-size:13px;min-width:0;\">\n  <thead>\n    <tr style=\"background:#0d1b2a;color:white;\">\n      <th style=\"padding:11px 12px;text-align:left;font-size:11px;font-weight:600;text-transform:uppercase;letter-spacing:.06em;\">Property<\/th>\n      <th style=\"padding:11px 12px;text-align:left;font-size:11px;font-weight:600;text-transform:uppercase;letter-spacing:.06em;\">What it holds<\/th>\n    <\/tr>\n  <\/thead>\n  <tbody>\n    <tr><td style=\"padding:9px 12px;border-bottom:1px solid #f3f4f6;font-weight:700;\">cq_action<\/td><td style=\"padding:9px 12px;border-bottom:1px solid #f3f4f6;\">The recommended action: Accept, Challenge or Deny<\/td><\/tr>\n    <tr><td style=\"padding:9px 12px;border-bottom:1px solid #f3f4f6;font-weight:700;\">cq_email_verdict<\/td><td style=\"padding:9px 12px;border-bottom:1px solid #f3f4f6;\">Benign, Suspicious or Malicious, for the email entered<\/td><\/tr>\n    <tr><td style=\"padding:9px 12px;border-bottom:1px solid #f3f4f6;font-weight:700;\">cq_phone_verdict<\/td><td style=\"padding:9px 12px;border-bottom:1px solid #f3f4f6;\">Benign, Suspicious or Malicious, for the phone number entered<\/td><\/tr>\n    <tr><td style=\"padding:9px 12px;border-bottom:1px solid #f3f4f6;font-weight:700;\">cq_threat_type \/ cq_threat_type_name<\/td><td style=\"padding:9px 12px;border-bottom:1px solid #f3f4f6;\">The most severe threat detected, such as Malicious Bots, Automation Tools, Click Farm or Malicious User Input<\/td><\/tr>\n    <tr><td style=\"padding:9px 12px;font-weight:700;\">cq_signals<\/td><td style=\"padding:9px 12px;\">The signals behind the verdict, so you can see <em>why<\/em> a lead was flagged<\/td><\/tr>\n  <\/tbody>\n<\/table>\n<\/div>\n\n<p>Lead Shield also adds two technical fields, <strong>cq_req_id<\/strong> and <strong>cq_tag_hash<\/strong>, which it uses to connect each submission to the visitor&#8217;s on-site behavior. You don&#8217;t need to do anything with them. Results from every protected form, HubSpot and WordPress, also appear in the Lead Shield dashboard in ClickCease, where the <strong>Detailed View<\/strong> lists every Malicious and Suspicious submission. Full field definitions are in the <a href=\"https:\/\/helpcenter.clickcease.com\/en-us\/articles\/16802206-form-validation-and-response-process\" style=\"color:#1a3a5c;font-weight:600;\">form validation guide<\/a>.<\/p>\n\n<h2>How should you use Lead Shield verdicts in HubSpot?<\/h2>\n\n<p>Because the verdict is a contact property, you can use it anywhere HubSpot lets you filter on properties. A simple starting policy:<\/p>\n\n<div style=\"overflow-x:auto;-webkit-overflow-scrolling:touch;margin:22px 0;border-radius:10px;box-shadow:0 1px 3px rgba(0,0,0,.08);\">\n<table style=\"width:100%;border-collapse:collapse;font-size:13px;min-width:0;\">\n  <thead>\n    <tr style=\"background:#0d1b2a;color:white;\">\n      <th style=\"padding:11px 12px;text-align:left;font-size:11px;font-weight:600;text-transform:uppercase;letter-spacing:.06em;\">cq_action<\/th>\n      <th style=\"padding:11px 12px;text-align:left;font-size:11px;font-weight:600;text-transform:uppercase;letter-spacing:.06em;\">What it means<\/th>\n      <th style=\"padding:11px 12px;text-align:left;font-size:11px;font-weight:600;text-transform:uppercase;letter-spacing:.06em;\">What to do in HubSpot<\/th>\n    <\/tr>\n  <\/thead>\n  <tbody>\n    <tr><td style=\"padding:9px 12px;border-bottom:1px solid #f3f4f6;font-weight:700;color:#007a52;\">Accept<\/td><td style=\"padding:9px 12px;border-bottom:1px solid #f3f4f6;\">Real person, real contact details<\/td><td style=\"padding:9px 12px;border-bottom:1px solid #f3f4f6;\">Route to sales and sequences as normal<\/td><\/tr>\n    <tr><td style=\"padding:9px 12px;border-bottom:1px solid #f3f4f6;font-weight:700;color:#b45309;\">Challenge<\/td><td style=\"padding:9px 12px;border-bottom:1px solid #f3f4f6;\">Some risk signals, the grey zone<\/td><td style=\"padding:9px 12px;border-bottom:1px solid #f3f4f6;\">Send to a review list or lower-priority queue before a rep invests time<\/td><\/tr>\n    <tr><td style=\"padding:9px 12px;font-weight:700;color:#d93025;\">Deny<\/td><td style=\"padding:9px 12px;\">Bot, fake identity or known bad actor<\/td><td style=\"padding:9px 12px;\">Keep out of sales handoff, sequences and pipeline reporting<\/td><\/tr>\n  <\/tbody>\n<\/table>\n<\/div>\n\n<p>In practice, that usually means a saved contact view or list for each action, a workflow branch on <strong>cq_action<\/strong> if your HubSpot plan includes workflows, and a report that counts only Accept leads, so you can measure <em>cost per qualified lead<\/em> instead of raw form fills.<\/p>\n\n<h2>Lead Shield vs Bot Mitigation on HubSpot: do you need both?<\/h2>\n\n<p>Yes, because they act at different points. <strong>Bot Mitigation<\/strong> stops malicious bots before they reach your HubSpot forms, so automated junk never becomes a contact in your CRM. <strong>Lead Shield<\/strong> scores the submissions that do arrive, including people entering fake or throwaway details, and writes the verdict to the contact. <strong>Pixel Guard<\/strong> keeps invalid visitors from firing your conversion tags, so fake form fills don\u2019t teach your ad campaigns to find more of the same. For how the three layers fit together, see our <a href=\"https:\/\/www.clickcease.com\/blog\/fake-leads\/\" style=\"color:#1a3a5c;font-weight:600;\">guide to fake leads<\/a>. For the ad side of the problem, see our guides to <a href=\"https:\/\/www.clickcease.com\/blog\/what-is-click-fraud-the-complete-2026-guide\/\" style=\"color:#1a3a5c;font-weight:600;\">click fraud<\/a> and <a href=\"https:\/\/www.clickcease.com\/blog\/what-is-invalid-traffic\/\" style=\"color:#1a3a5c;font-weight:600;\">invalid traffic<\/a>.<\/p>\n\n<!-- Enterprise proof box -->\n<div style=\"border:1px solid #c7e0f8;border-radius:10px;padding:24px 26px;margin:28px 0;background:#f0f7ff;position:relative;\">\n  <div style=\"display:inline-block;background:#FF6B35;color:white;font-size:10px;font-weight:700;text-transform:uppercase;letter-spacing:.08em;padding:3px 10px;border-radius:20px;margin-bottom:14px;\">Proven at enterprise scale<\/div>\n  <h3 style=\"margin-top:0;color:#0d1b2a;\">The engine behind Lead Shield is already battle-tested<\/h3>\n  <p style=\"font-size:14.5px;line-height:1.7;margin:0 0 18px;\">Lead Shield brings SMBs the same fake-lead detection technology CHEQ runs for enterprise teams as <strong>CHEQ Form Guard<\/strong>, on the same CHEQ enterprise engine that protects hundreds of enterprise accounts, including Fortune 500 companies. In one deployment, a leading B2B SaaS company found that more than 20% of its inbound leads were fake, with reps losing roughly an hour on each one. After rolling out Form Guard:<\/p>\n  <div style=\"display:flex;flex-wrap:wrap;gap:12px;\">\n    <div style=\"flex:1;min-width:150px;background:#0d1b2a;border-radius:10px;padding:18px 14px;text-align:center;\">\n      <span style=\"display:block;font-size:26px;font-weight:700;color:#FF6B35;line-height:1.1;margin-bottom:6px;\">20k+<\/span>\n      <span style=\"font-size:11px;color:rgba(255,255,255,.8);line-height:1.4;\">hours saved annually on fake-lead cleanup<\/span>\n    <\/div>\n    <div style=\"flex:1;min-width:150px;background:#0d1b2a;border-radius:10px;padding:18px 14px;text-align:center;\">\n      <span style=\"display:block;font-size:26px;font-weight:700;color:#FF6B35;line-height:1.1;margin-bottom:6px;\">$800k+<\/span>\n      <span style=\"font-size:11px;color:rgba(255,255,255,.8);line-height:1.4;\">in annual labor costs saved<\/span>\n    <\/div>\n    <div style=\"flex:1;min-width:150px;background:#0d1b2a;border-radius:10px;padding:18px 14px;text-align:center;\">\n      <span style=\"display:block;font-size:26px;font-weight:700;color:#FF6B35;line-height:1.1;margin-bottom:6px;\">20%+<\/span>\n      <span style=\"font-size:11px;color:rgba(255,255,255,.8);line-height:1.4;\">of inbound leads found to be fake<\/span>\n    <\/div>\n  <\/div>\n  <p style=\"font-size:12px;color:#6b7280;margin:14px 0 0;font-style:italic;\">Results from a CHEQ Form Guard enterprise deployment (customer anonymized). Lead Shield is powered by the same CHEQ engine.<\/p>\n<\/div>\n\n<!-- FAQ -->\n<h2>Frequently asked questions<\/h2>\n\n<div style=\"display:flex;flex-direction:column;gap:1px;border:1px solid #f3f4f6;border-radius:10px;overflow:hidden;margin:16px 0 32px;\">\n\n  <div style=\"padding:16px 18px;background:white;\">\n    <p style=\"font-size:14px;font-weight:700;color:#0d1b2a;margin:0 0 8px;\">How do I stop fake leads and spam on HubSpot forms?<\/p>\n    <p style=\"font-size:13.5px;color:#374151;margin:0;line-height:1.7;\">Turn on HubSpot&#8217;s own filters, such as reCAPTCHA and blocking free email domains, to stop obvious spam. Then add ClickCease Lead Shield, which checks every submission on the visitor&#8217;s behavior plus email and phone validation and writes a Malicious, Suspicious or Benign verdict to the HubSpot contact. Add ClickCease Bot Mitigation to stop malicious bots before they reach your forms.<\/p>\n  <\/div>\n\n  <div style=\"padding:16px 18px;background:#f9fafb;\">\n    <p style=\"font-size:14px;font-weight:700;color:#0d1b2a;margin:0 0 8px;\">Which HubSpot forms does Lead Shield support?<\/p>\n    <p style=\"font-size:13.5px;color:#374151;margin:0;line-height:1.7;\">Standard HubSpot forms. HubSpot pop-up forms and non-HubSpot forms aren&#8217;t covered by the HubSpot connection. If you use Gravity Forms, WPForms or Contact Form 7 on WordPress, Lead Shield covers those through the ClickCease WordPress plugin.<\/p>\n  <\/div>\n\n  <div style=\"padding:16px 18px;background:white;\">\n    <p style=\"font-size:14px;font-weight:700;color:#0d1b2a;margin:0 0 8px;\">Where do I see Lead Shield results in HubSpot?<\/p>\n    <p style=\"font-size:13.5px;color:#374151;margin:0;line-height:1.7;\">On the contact record, as cq_ properties: cq_action, cq_email_verdict, cq_phone_verdict, cq_threat_type, cq_threat_type_name and cq_signals. Add them as columns under CRM, Contacts, Edit columns. Results also appear in the Lead Shield dashboard in ClickCease.<\/p>\n  <\/div>\n\n  <div style=\"padding:16px 18px;background:#f9fafb;\">\n    <p style=\"font-size:14px;font-weight:700;color:#0d1b2a;margin:0 0 8px;\">Does Lead Shield replace HubSpot&#8217;s reCAPTCHA and spam filters?<\/p>\n    <p style=\"font-size:13.5px;color:#374151;margin:0;line-height:1.7;\">No, it adds to them. HubSpot&#8217;s filters stop obvious spam such as crude bots, gibberish and blocked email domains. Lead Shield scores the submissions that get through, including real-looking leads with fake details, and gives you a graded verdict to route on.<\/p>\n  <\/div>\n\n  <div style=\"padding:16px 18px;background:white;\">\n    <p style=\"font-size:14px;font-weight:700;color:#0d1b2a;margin:0 0 8px;\">Is Lead Shield included in my ClickCease plan?<\/p>\n    <p style=\"font-size:13.5px;color:#374151;margin:0;line-height:1.7;\">Yes. Lead Shield is included in every ClickCease plan, with no upgrade needed; protected submissions count toward your plan\u2019s usage.<\/p>\n  <\/div>\n\n  <div style=\"padding:16px 18px;background:#f9fafb;\">\n    <p style=\"font-size:14px;font-weight:700;color:#0d1b2a;margin:0 0 8px;\">Why does HubSpot say the CHEQ app is unverified?<\/p>\n    <p style=\"font-size:13.5px;color:#374151;margin:0;line-height:1.7;\">It means the CHEQ app hasn&#8217;t yet completed HubSpot&#8217;s partner review. It isn&#8217;t a sign of a problem: the connection uses HubSpot&#8217;s secure authorization, you control what it can access, and you can disconnect at any time from your HubSpot settings.<\/p>\n  <\/div>\n\n  <div style=\"padding:16px 18px;background:white;\">\n    <p style=\"font-size:14px;font-weight:700;color:#0d1b2a;margin:0 0 8px;\">Can I use Lead Shield on HubSpot and WordPress at the same time?<\/p>\n    <p style=\"font-size:13.5px;color:#374151;margin:0;line-height:1.7;\">Yes. You can connect multiple HubSpot accounts and WordPress sites. Monitoring Mode is set separately for HubSpot and WordPress, and the Lead Shield dashboard shows results from both.<\/p>\n  <\/div>\n\n  <div style=\"padding:16px 18px;background:#f9fafb;\">\n    <p style=\"font-size:14px;font-weight:700;color:#0d1b2a;margin:0 0 8px;\">How do I disconnect Lead Shield from HubSpot?<\/p>\n    <p style=\"font-size:13.5px;color:#374151;margin:0;line-height:1.7;\">Disconnect the account in Lead Shield \u2192 Form Management, then uninstall the CHEQ app from HubSpot&#8217;s Connected Apps page. The hidden fields Lead Shield added to your forms are removed. You can reconnect at any time, but you&#8217;ll need to re-select the forms you want protected.<\/p>\n  <\/div>\n\n<\/div>\n\n<!-- CTA -->\n<div style=\"background:linear-gradient(135deg,#0d1b2a 0%,#1a3a5c 100%);border-radius:10px;padding:36px 32px;text-align:center;margin:40px 0 0;\">\n  <div style=\"display:inline-block;background:#FF6B35;color:white;font-size:11px;font-weight:700;text-transform:uppercase;letter-spacing:.08em;padding:4px 12px;border-radius:20px;margin-bottom:14px;\">Lead Shield for HubSpot<\/div>\n  <h2 style=\"color:white;border:none;padding:0;margin:0 0 10px;font-size:22px;font-weight:700;\">Find out how many of your HubSpot leads are real<\/h2>\n  <p style=\"color:rgba(255,255,255,.8);max-width:480px;margin:0 auto 24px;font-size:14px;line-height:1.6;\">Try ClickCease free for 7 days. Protect your Google, Meta and Microsoft Ads, block bots on your site, and score every HubSpot form submission with Lead Shield.<\/p>\n  <a href=\"https:\/\/app.clickcease.com\/signup\" style=\"display:inline-block;background:#FF6B35;color:white;font-weight:700;font-size:15px;padding:14px 32px;border-radius:8px;text-decoration:none;box-shadow:0 4px 14px rgba(255,107,53,.4);\">Start your free 7-day trial \u2192<\/a>\n  <p style=\"font-size:12px;color:rgba(255,255,255,.45);margin-top:10px;margin-bottom:0;\">No credit card required \u00b7 Cancel anytime \u00b7 15,000+ companies protected by CHEQ<\/p>\n<\/div>\n\n<p style=\"font-size:12px;color:#6b7280;margin-top:28px;padding-top:14px;border-top:1px solid #f3f4f6;line-height:1.7;\"><strong>Sources:<\/strong> ClickCease help center: <a href=\"https:\/\/helpcenter.clickcease.com\/en-us\/articles\/16802204-setting-up-lead-shield-for-hubspot\" style=\"color:#6b7280;\">Setting Up Lead Shield for HubSpot<\/a>, <a href=\"https:\/\/helpcenter.clickcease.com\/en-us\/articles\/16802206-form-validation-and-response-process\" style=\"color:#6b7280;\">Form Validation and Response Process<\/a>, <a href=\"https:\/\/helpcenter.clickcease.com\/en-us\/articles\/16802205-lead-shield-threat-types\" style=\"color:#6b7280;\">Lead Shield Threat Types<\/a> and <a href=\"https:\/\/helpcenter.clickcease.com\/en-us\/articles\/16802209-why-does-hubspot-warn-me-about-connecting-the-cheq-app\" style=\"color:#6b7280;\">Why does HubSpot warn me about connecting the CHEQ app?<\/a> (reviewed November 2026); HubSpot Knowledge Base, <a href=\"https:\/\/knowledge.hubspot.com\/forms\/prevent-spam-form-submissions\" style=\"color:#6b7280;\">Prevent and filter spam in form submissions<\/a> (updated September 2026); CHEQ, <em>Form Guard<\/em> enterprise case study (customer anonymized).<\/p>\n","protected":false},"excerpt":{"rendered":"<p>HubSpot&#8217;s reCAPTCHA stops obvious spam. Here&#8217;s how ClickCease Lead Shield scores every HubSpot form submission, writes the verdict to the contact, and how to use it in your lists, workflows and reports.<\/p>\n","protected":false},"author":43,"featured_media":11609,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0},"categories":[2,5,1715],"tags":[],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.1 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Stop Fake Leads &amp; Spam on HubSpot Forms | Lead Shield<\/title>\n<meta name=\"description\" content=\"HubSpot form spam getting past reCAPTCHA? ClickCease Lead Shield scores every submission and writes a Malicious, Suspicious or Benign verdict to the contact.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.clickcease.com\/blog\/lead-shield-hubspot-forms\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Stop Fake Leads &amp; Spam on HubSpot Forms | Lead Shield\" \/>\n<meta property=\"og:description\" content=\"HubSpot form spam getting past reCAPTCHA? ClickCease Lead Shield scores every submission and writes a Malicious, Suspicious or Benign verdict to the contact.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.clickcease.com\/blog\/lead-shield-hubspot-forms\/\" \/>\n<meta property=\"og:site_name\" content=\"ClickCease Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/ClickCease-484865984976254\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-12T07:43:46+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-11-12T09:12:21+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.clickcease.com\/blog\/wp-content\/uploads\/2026\/11\/Lead-Shield-for-HubSpot-Forms.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1672\" \/>\n\t<meta property=\"og:image:height\" content=\"941\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Jacky Damache\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@clickcease\" \/>\n<meta name=\"twitter:site\" content=\"@clickcease\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jacky Damache\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.clickcease.com\/blog\/lead-shield-hubspot-forms\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.clickcease.com\/blog\/lead-shield-hubspot-forms\/\"},\"author\":{\"name\":\"Jacky Damache\",\"@id\":\"https:\/\/www.clickcease.com\/blog\/#\/schema\/person\/251ed01c26b1512673870bf3e7cb825e\"},\"headline\":\"How to Stop Fake Leads and Spam on HubSpot Forms (2026 Guide)\",\"datePublished\":\"2026-11-12T07:43:46+00:00\",\"dateModified\":\"2026-11-12T09:12:21+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.clickcease.com\/blog\/lead-shield-hubspot-forms\/\"},\"wordCount\":2066,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.clickcease.com\/blog\/#organization\"},\"articleSection\":[\"Ad Fraud\",\"Click Fraud\",\"new clickcease\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.clickcease.com\/blog\/lead-shield-hubspot-forms\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.clickcease.com\/blog\/lead-shield-hubspot-forms\/\",\"url\":\"https:\/\/www.clickcease.com\/blog\/lead-shield-hubspot-forms\/\",\"name\":\"Stop Fake Leads & Spam on HubSpot Forms | Lead Shield\",\"isPartOf\":{\"@id\":\"https:\/\/www.clickcease.com\/blog\/#website\"},\"datePublished\":\"2026-11-12T07:43:46+00:00\",\"dateModified\":\"2026-11-12T09:12:21+00:00\",\"description\":\"HubSpot form spam getting past reCAPTCHA? ClickCease Lead Shield scores every submission and writes a Malicious, Suspicious or Benign verdict to the contact.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.clickcease.com\/blog\/lead-shield-hubspot-forms\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.clickcease.com\/blog\/lead-shield-hubspot-forms\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.clickcease.com\/blog\/lead-shield-hubspot-forms\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Blog\",\"item\":\"https:\/\/www.clickcease.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to Stop Fake Leads and Spam on HubSpot Forms (2026 Guide)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.clickcease.com\/blog\/#website\",\"url\":\"https:\/\/www.clickcease.com\/blog\/\",\"name\":\"ClickCease Blog\",\"description\":\"How to protect your ppc campaigns from click fraud.\",\"publisher\":{\"@id\":\"https:\/\/www.clickcease.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.clickcease.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.clickcease.com\/blog\/#organization\",\"name\":\"ClickCease\",\"url\":\"https:\/\/www.clickcease.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.clickcease.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/clickceaseblog.kinsta.cloud\/wp-content\/uploads\/2019\/02\/cc-logo-black.png\",\"contentUrl\":\"https:\/\/clickceaseblog.kinsta.cloud\/wp-content\/uploads\/2019\/02\/cc-logo-black.png\",\"width\":300,\"height\":70,\"caption\":\"ClickCease\"},\"image\":{\"@id\":\"https:\/\/www.clickcease.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/ClickCease-484865984976254\/\",\"https:\/\/twitter.com\/clickcease\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.clickcease.com\/blog\/#\/schema\/person\/251ed01c26b1512673870bf3e7cb825e\",\"name\":\"Jacky Damache\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.clickcease.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/www.clickcease.com\/blog\/wp-content\/uploads\/2026\/09\/1762427376683-e1789498235401.png\",\"contentUrl\":\"https:\/\/www.clickcease.com\/blog\/wp-content\/uploads\/2026\/09\/1762427376683-e1789498235401.png\",\"caption\":\"Jacky Damache\"},\"description\":\"Jacky Damache is Associate VP of Customer Experience at CHEQ, the go-to-market security company behind ClickCease, where he leads a 40+ person global team protecting advertisers from invalid traffic and ad fraud. He spent nine years at Google (2012-2021) in gTech - first as a Support Strategist for Google Ads, working directly with SMB advertisers, then as a Senior Program Manager in Specialty Customer Care running support programs for advanced ad products including Display &amp; Video 360 (DV360), Google's programmatic platform. That inside view of both search and programmatic advertising now informs his work on the other side of the problem: helping businesses detect and block the fake clicks, bots, and invalid traffic that drain ad budgets and pollute campaign data. He writes about click fraud, ad verification, and invalid traffic (IVT).\",\"sameAs\":[\"https:\/\/www.clickcease.com\",\"https:\/\/www.linkedin.com\/in\/jdp234\/\"],\"url\":\"https:\/\/www.clickcease.com\/blog\/author\/jacky-d\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Stop Fake Leads & Spam on HubSpot Forms | Lead Shield","description":"HubSpot form spam getting past reCAPTCHA? ClickCease Lead Shield scores every submission and writes a Malicious, Suspicious or Benign verdict to the contact.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.clickcease.com\/blog\/lead-shield-hubspot-forms\/","og_locale":"en_US","og_type":"article","og_title":"Stop Fake Leads & Spam on HubSpot Forms | Lead Shield","og_description":"HubSpot form spam getting past reCAPTCHA? ClickCease Lead Shield scores every submission and writes a Malicious, Suspicious or Benign verdict to the contact.","og_url":"https:\/\/www.clickcease.com\/blog\/lead-shield-hubspot-forms\/","og_site_name":"ClickCease Blog","article_publisher":"https:\/\/www.facebook.com\/ClickCease-484865984976254\/","article_published_time":"2026-11-12T07:43:46+00:00","article_modified_time":"2026-11-12T09:12:21+00:00","og_image":[{"width":1672,"height":941,"url":"https:\/\/www.clickcease.com\/blog\/wp-content\/uploads\/2026\/11\/Lead-Shield-for-HubSpot-Forms.jpg","type":"image\/jpeg"}],"author":"Jacky Damache","twitter_card":"summary_large_image","twitter_creator":"@clickcease","twitter_site":"@clickcease","twitter_misc":{"Written by":"Jacky Damache","Est. reading time":"9 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.clickcease.com\/blog\/lead-shield-hubspot-forms\/#article","isPartOf":{"@id":"https:\/\/www.clickcease.com\/blog\/lead-shield-hubspot-forms\/"},"author":{"name":"Jacky Damache","@id":"https:\/\/www.clickcease.com\/blog\/#\/schema\/person\/251ed01c26b1512673870bf3e7cb825e"},"headline":"How to Stop Fake Leads and Spam on HubSpot Forms (2026 Guide)","datePublished":"2026-11-12T07:43:46+00:00","dateModified":"2026-11-12T09:12:21+00:00","mainEntityOfPage":{"@id":"https:\/\/www.clickcease.com\/blog\/lead-shield-hubspot-forms\/"},"wordCount":2066,"commentCount":0,"publisher":{"@id":"https:\/\/www.clickcease.com\/blog\/#organization"},"articleSection":["Ad Fraud","Click Fraud","new clickcease"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.clickcease.com\/blog\/lead-shield-hubspot-forms\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.clickcease.com\/blog\/lead-shield-hubspot-forms\/","url":"https:\/\/www.clickcease.com\/blog\/lead-shield-hubspot-forms\/","name":"Stop Fake Leads & Spam on HubSpot Forms | Lead Shield","isPartOf":{"@id":"https:\/\/www.clickcease.com\/blog\/#website"},"datePublished":"2026-11-12T07:43:46+00:00","dateModified":"2026-11-12T09:12:21+00:00","description":"HubSpot form spam getting past reCAPTCHA? ClickCease Lead Shield scores every submission and writes a Malicious, Suspicious or Benign verdict to the contact.","breadcrumb":{"@id":"https:\/\/www.clickcease.com\/blog\/lead-shield-hubspot-forms\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.clickcease.com\/blog\/lead-shield-hubspot-forms\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.clickcease.com\/blog\/lead-shield-hubspot-forms\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https:\/\/www.clickcease.com\/blog\/"},{"@type":"ListItem","position":2,"name":"How to Stop Fake Leads and Spam on HubSpot Forms (2026 Guide)"}]},{"@type":"WebSite","@id":"https:\/\/www.clickcease.com\/blog\/#website","url":"https:\/\/www.clickcease.com\/blog\/","name":"ClickCease Blog","description":"How to protect your ppc campaigns from click fraud.","publisher":{"@id":"https:\/\/www.clickcease.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.clickcease.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.clickcease.com\/blog\/#organization","name":"ClickCease","url":"https:\/\/www.clickcease.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.clickcease.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/clickceaseblog.kinsta.cloud\/wp-content\/uploads\/2019\/02\/cc-logo-black.png","contentUrl":"https:\/\/clickceaseblog.kinsta.cloud\/wp-content\/uploads\/2019\/02\/cc-logo-black.png","width":300,"height":70,"caption":"ClickCease"},"image":{"@id":"https:\/\/www.clickcease.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/ClickCease-484865984976254\/","https:\/\/twitter.com\/clickcease"]},{"@type":"Person","@id":"https:\/\/www.clickcease.com\/blog\/#\/schema\/person\/251ed01c26b1512673870bf3e7cb825e","name":"Jacky Damache","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.clickcease.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/www.clickcease.com\/blog\/wp-content\/uploads\/2026\/09\/1762427376683-e1789498235401.png","contentUrl":"https:\/\/www.clickcease.com\/blog\/wp-content\/uploads\/2026\/09\/1762427376683-e1789498235401.png","caption":"Jacky Damache"},"description":"Jacky Damache is Associate VP of Customer Experience at CHEQ, the go-to-market security company behind ClickCease, where he leads a 40+ person global team protecting advertisers from invalid traffic and ad fraud. He spent nine years at Google (2012-2021) in gTech - first as a Support Strategist for Google Ads, working directly with SMB advertisers, then as a Senior Program Manager in Specialty Customer Care running support programs for advanced ad products including Display &amp; Video 360 (DV360), Google's programmatic platform. That inside view of both search and programmatic advertising now informs his work on the other side of the problem: helping businesses detect and block the fake clicks, bots, and invalid traffic that drain ad budgets and pollute campaign data. He writes about click fraud, ad verification, and invalid traffic (IVT).","sameAs":["https:\/\/www.clickcease.com","https:\/\/www.linkedin.com\/in\/jdp234\/"],"url":"https:\/\/www.clickcease.com\/blog\/author\/jacky-d\/"}]}},"_links":{"self":[{"href":"https:\/\/www.clickcease.com\/blog\/wp-json\/wp\/v2\/posts\/11607"}],"collection":[{"href":"https:\/\/www.clickcease.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.clickcease.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.clickcease.com\/blog\/wp-json\/wp\/v2\/users\/43"}],"replies":[{"embeddable":true,"href":"https:\/\/www.clickcease.com\/blog\/wp-json\/wp\/v2\/comments?post=11607"}],"version-history":[{"count":3,"href":"https:\/\/www.clickcease.com\/blog\/wp-json\/wp\/v2\/posts\/11607\/revisions"}],"predecessor-version":[{"id":11616,"href":"https:\/\/www.clickcease.com\/blog\/wp-json\/wp\/v2\/posts\/11607\/revisions\/11616"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.clickcease.com\/blog\/wp-json\/wp\/v2\/media\/11609"}],"wp:attachment":[{"href":"https:\/\/www.clickcease.com\/blog\/wp-json\/wp\/v2\/media?parent=11607"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.clickcease.com\/blog\/wp-json\/wp\/v2\/categories?post=11607"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.clickcease.com\/blog\/wp-json\/wp\/v2\/tags?post=11607"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}