How CAPTCHA Protects Your Liverpool Business Website

You go to check your enquiries and find 23 new messages. Half are spam. Fake names, dodgy links, nonsense text. Real customer enquiries from people in Liverpool are buried in the noise.

This is what happens when a website has no protection on its contact forms. CAPTCHA is what stops it, and modern versions are invisible to your genuine customers.

What CAPTCHA actually is

CAPTCHA was invented in the early 2000s to solve a straightforward problem: automated programs were flooding websites with fake accounts and spam. The solution was a test that humans could pass easily but computers couldn't. That's still the principle today, even though the technology has come a long way since.

The name stands for Completely Automated Public Turing test to tell Computers and Humans Apart. Early versions asked you to read distorted text. Modern versions do most of the work invisibly in the background.

Why bots target small businesses too

You might think bots only go after big companies. They don't. Bots aren't selective, they're automated. Without protection, your site is open to:

• Contact form spam: Your inbox fills with fake enquiries, burying genuine messages from customers in Crosby, Woolton, or anywhere else
• Fake bookings and orders: For restaurants, salons, or online shops, bots create fake entries that throw off your scheduling and stock
• Spam comments: If you have a blog, bots post comments stuffed with dodgy links, damaging your credibility and potentially your search rankings
• Skewed analytics: Bot traffic makes it harder to understand how real customers are actually using your site

How to tell if you already have a problem

Signs your forms may not be properly protected:

• You receive enquiries with no name, blank phone numbers, or obviously fake email addresses
• You get messages in languages you don't serve
• Your inbox has regular "enquiries" with links to unrelated sites
• You've had fake bookings or orders you can't trace to a real person

If any of these sound familiar, this is worth sorting sooner rather than later.

Modern CAPTCHA doesn't annoy your customers

The old-style distorted text challenges frustrated users and were particularly difficult for people with accessibility needs. That version is largely obsolete.

reCAPTCHA v3: Google's current standard, works in the background. It analyses behaviour on your site (mouse movements, how long someone spends on a page) and assigns a risk score. Genuine users never see a challenge at all. They just click submit and it works. Only the most suspicious traffic gets flagged.

What to use and where

• Contact forms: Google reCAPTCHA v3 is the standard choice. It adds solid protection with no friction for real customers
• E-commerce checkouts: Security is important here. An invisible CAPTCHA helps prevent fraudulent orders
• Blog comments: A simple CAPTCHA or a spam filter like Akismet (free for WordPress) handles most of it automatically

The goal is to keep bots out without getting in the way of a genuine customer trying to reach you. Modern tools make that straightforward.

If you want someone to check your site's forms are properly protected, we can take a look as part of a free site review.