Preventing bots on a page with a Klaviyo embed form?

Store Design

Topic summary

A merchant is experiencing bot spam on a Klaviyo embedded form used for custom product inquiries. The bot submissions trigger internal alert emails to staff, creating notification overload.

Proposed Solutions:

  • Honeypot field: Add a hidden input field (shown in code snippet) that bots typically fill but humans don’t. Filter submissions in Klaviyo where this field contains data.
  • Google reCAPTCHA: Implementation depends on embed method. Note that Klaviyo native forms have built-in bot protection, but embedded versions may lack this.

Implementation Question:
The merchant asks where to apply the honeypot filter—specifically whether to add it to the trigger conditions of their “Internal Alert Flow” (triggered by “Added to Custom Product List”) and which profile property to filter on.

Status: Awaiting clarification on the technical implementation details for filtering honeypot submissions within Klaviyo’s flow system.

Summarized with AI on October 28. AI used: claude-sonnet-4-5-20250929.
1

I have a page on my website with a Klaviyo embed form used for customers to inquire about custom products.
Recently we’ve been getting lots of bot submissions and we’re trying to solve the issue. I’ve been working on adding a Recaptcha that grants you access to the form, with no luck. Anyone have ideas on how I could solve this?

2

add a honeypot field which is a hidden input that normal users never fill out but bots usually do
so you add this inside the form

in Klaviyo set up a flow or filter to ignore or delete submissions where that field is filled out
bots will usually hit that every time and you can use it to auto-filter trash

second thing you can try is using Google reCAPTCHA but that depends on how you embedded the form
Klaviyo native forms have some bot protection already but the embed version doesn’t always

1 Like
3

Thank you so much!

For the honeypot method,

*"*in Klaviyo set up a flow or filter to ignore or delete submissions where that field is filled out"
Should I be adding a filter on the trigger for our Internal Alert Flow? What profile property should I be filtering?

More context - When a form is submitted, it sends an internal alert to staff - letting us know about the order inquiry. The flow we currently use is triggered off "Added to “Custom Product List” The internal alerts are where the main issue with the bots is stemming from, were getting influxes of junk emails from it.

Thank you again for your help!