Last updated: October 4, 2026 · 4 min read · By Ali Raza
To stop fake quote requests, layer four defences: a hidden honeypot field, an invisible CAPTCHA (reCAPTCHA v3 or Cloudflare Turnstile), phone and email validation for your service area, and SMS phone verification with a one-time code. Phone verification is the most effective step against spam quote requests, because only real, reachable numbers can submit.
Fake names, made-up phone numbers, “test test” messages and outright spam: if your quote form gets these, you’re not alone. Fake quote requests waste your team’s time, skew your marketing numbers, and can even get your SMS follow-up flagged if you text numbers that don’t belong to the person who filled in the form.
The good news is that you don’t have to choose between a simple form and a clean inbox. Here’s how to stop fake leads on a contractor website, from quick fixes to the most effective option.
Four filters between your form and your team
Where do spam quote requests come from?
- Spam bots that fill in every form they find, often with links.
- Competitors or pranksters submitting fake jobs.
- Real people entering the wrong number by mistake, or on purpose to avoid sales calls.
- Low-quality paid leads from ad campaigns or lead sellers.
Each needs a slightly different fix, so the best setup layers a few of them.
1. What is a honeypot field and does it stop form spam?
A honeypot is a field that real visitors can’t see but bots fill in automatically. If it has a value, the submission is discarded. It’s invisible to homeowners and stops a lot of basic bot spam. Most form plugins offer it.
2. How to stop spam on a contact form with a modern CAPTCHA
Tools like Google reCAPTCHA v3 or Cloudflare Turnstile check behaviour in the background and block suspicious submissions, usually without making people click on traffic lights. They’re good against bots, but they don’t stop a real person entering a fake number.
3. Which form field validation rules block fake leads?
- Check that phone numbers are valid for your service area (US, Canadian or UK formats).
- Block disposable email domains.
- Reject messages that contain links, which real homeowners rarely include.
- Limit how many submissions can come from one device or IP address in a short time.
4. How to verify phone numbers on a website form
Before the form submits, the homeowner gets a 4–6 digit code by text and enters it on the page. Only verified numbers go through. This is the most effective way to stop fake quote requests, and it does three things at once:
- Fake and mistyped numbers can’t submit.
- Every lead in your CRM has a real, reachable phone number.
- You have a record that the homeowner entered their own number, which supports your SMS consent records. See our SMS compliance guide for contractors for why that matters.
Does it reduce the number of leads? Usually a little, and nearly all of the drop is junk. A homeowner who wants a quote doesn’t mind a 10-second verification step, especially when it’s explained clearly (“We’ll text you a code so we can confirm your quote”).
One practical tip: send the code only after the rest of the form is filled in, and let people request a new code if it doesn’t arrive. That keeps the step from feeling like a barrier at the start.
5. Why should you track the source of every lead?
Save where each lead came from (Google Ads, Facebook, organic search, a lead seller) along with its outcome. You’ll quickly see which channels send junk and can cut them, which saves more money than any form filter.
What we use in practice at Upstack Web
For a renovation company in Ontario, Upstack Web built a quote form with SMS one-time-code verification, CRM and email sync, and instant follow-up. Junk submissions stopped reaching the team, and every lead arrived with a verified number, ready for an instant automated reply.
Quick checklist
- Honeypot field turned on.
- reCAPTCHA v3 or Turnstile added.
- Phone and email validation for your service area.
- Phone verification by one-time code on the main quote form.
- Lead source saved with every submission.
Frequently asked questions
How do I stop fake quote requests on my website?
Layer a honeypot field, an invisible CAPTCHA such as reCAPTCHA v3 or Cloudflare Turnstile, phone and email validation, and SMS phone verification. Verification with a one-time code is the most effective step against fake numbers.
Does phone verification reduce the number of leads?
Usually slightly, and almost all of the drop is junk. Real homeowners rarely mind a short verification step when it is clearly explained.
Is reCAPTCHA enough to stop spam quote requests?
It stops most bots, but not real people entering fake or mistyped numbers. Combine it with phone verification for clean leads.
Can I add phone verification to a WordPress quote form?
Yes. It can be added with an SMS provider and a custom form or plugin, and connected to your CRM so only verified leads are saved.
Sources
Upstack Web builds verified quote forms and lead automation for contractors in the US, Canada, the UK and Europe. Learn more about our lead automation for contractors, or ask us to review your current form.