I have enabled Google reCAPTCHA from preferences. When I inspect the form o browser I see a hidden input for token is added to the form. But submission of contact us form is allowed any number of times, Am I missing any configuration?
All the shopify apis that are exposed publicly are being spammed. Can you please check this ASAP.