How I Stopped Fake Sign-Ups with Invisible reCAPTCHA v3
Published March 24, 2026, 2:52 a.m. by wielandtech
I used to get a steady stream of fake accounts and spam through my sign-up and contact forms. Not a huge volume, but enough to be annoying and make me question my data.
So I added Invisible reCAPTCHA v3. Since then, I haven't had a single fake account.
Why reCAPTCHA v3?
It works differently than the old checkbox version. There's no "I'm not a robot" challenge.
Instead, it gives each request a score based on how human it looks. You decide what score is acceptable and block the rest. Real users never see anything.
How I Implemented It
1. Load the script
``` html
```
2. Attach it to form submission
``` javascript async function getRecaptchaToken(action) { return await grecaptcha.execute("YOUR_SITE_KEY", { action }); }
document.querySelector("#signup-form").addEventListener("submit", async (e) => …