reCAPTCHA Is Blocking Real Visitors
Your spam protection is turning away genuine customers or making the form impossible to submit.
Common signs of this issue
- Visitors say the form won't submit, or they get stuck on a CAPTCHA that never completes.
- You see a CAPTCHA error like 'invalid site key' or 'ERROR for site owner'.
- The CAPTCHA box does not appear at all, but the form still refuses to send.
- Submissions dropped sharply right after you added or changed spam protection.
Safe checks you can do yourself
None of these require sharing passwords with anyone.
- Open your form in a private/incognito window and try to submit it as a visitor would. Note the exact error.
- Check that the CAPTCHA's domain matches your website — keys registered for one domain fail on another (including www vs non-www).
- Confirm both the site key and secret key are entered correctly and not swapped.
- Try a less aggressive mode (for example, reCAPTCHA v3 or Cloudflare Turnstile) that scores quietly instead of forcing a puzzle.
- Temporarily disable any second CAPTCHA — some sites accidentally stack two, which breaks submission.
What this usually means
A blocking CAPTCHA usually comes from a key mismatch, a wrong domain, or settings tuned too strictly. The fix is to align the keys with your real domain and dial the sensitivity down to a level real people pass.
An 'ERROR for site owner' message specifically points to a key or domain configuration problem, not a visitor problem.
What not to do
- Don't simply remove all protection — spam will flood back in within hours.
- Don't ignore reports that the form is broken; assume you are losing real inquiries until proven otherwise.
- Don't paste your keys into public forums or screenshots when asking for help.
When to get help
If genuine customers can't reach you because the form rejects them, that is lost business — worth fixing quickly. A helper can rebalance protection so it stops bots without turning away people.
Not sure what to do next?
Answer a few short questions and we'll point you to the safest next step — DIY, a freelancer, or a direct review. No passwords required.
Is this a business website? If this issue may be costing you leads, sales, or trust, you may want a direct review instead of trial and error.
Frequently asked questions
How do I know if it's blocking real people?
Test the form yourself in a private window and watch for any error. Also compare your inquiry volume before and after you added the CAPTCHA.
What's the least annoying spam protection?
An invisible option like reCAPTCHA v3 or Cloudflare Turnstile, often paired with a hidden honeypot, stops most spam without showing visitors a puzzle.