Junk leads come in four types: gibberish bots, spam links, empty bot submissions and fake brand partnership scams. Stopping them takes layers: hidden traps and a captcha for bots, required business details for quality, and a content screen that quarantines suspect leads instead of deleting them, so a real buyer is never lost.
The four kinds of junk lead
Not all junk is the same, and that matters, because each type gets past a different defense. These patterns come from real submissions to B2B websites, including our own.
- Gibberish bots: random strings in the name and message, a throwaway email domain, and a company field filled with a word like "google".
- Link spam: a short message with a tinyurl or similar link, often promoting adult or gambling sites.
- Empty bots: a generated name and a message that just says "Hello!", usually with a phone number that cannot exist.
- Brand impersonators: fluent English from someone claiming to represent a famous brand, using a lookalike domain. People, not bots, send these.
The scam that looks like your best lead
The fourth type deserves its own warning. A message arrives from "the marketing lead" at a household brand, offering a long-term agency partnership and a large monthly budget. The email address looks right at a glance, such as brandname-llc.com, brandnamein.com or brandnamework.com. It closes by asking you to reply to the address in the form, and says no proposal is needed yet.
That last line is the tell. Real procurement teams want proposals. These messages want a reply, and what follows is usually a link or a file. Treat them as phishing: check the domain against the brand's real website, and never open attachments from them.
- A domain that contains the brand name but is not the brand's website
- The same text as the company name repeated in the job title field
- Phrases such as "agency partnership" and "reply to the email address provided in this form"
- A domain registered only recently, which a public RDAP lookup will show
Why a captcha alone will not fix this
reCAPTCHA is good at spotting scripts, and it should stay. But a scam written by a person passes it easily, because a person is filling in the form. A captcha also says nothing about whether a real visitor is a real buyer.
Think of lead quality as layers, each stopping what the one before it missed.
| Layer | What it does | Stops |
|---|---|---|
| Hidden trap field | A field people cannot see and bots fill in | Simple bots |
| Time and behavior check | Flags forms filled in seconds with no typing | Scripted bots |
| reCAPTCHA | Scores how human the session looks | Most automated traffic |
| Required details | Asks for company, phone and a real need | Low-effort submissions |
| Email checks | Rejects throwaway domains and domains with no mail server | Fake addresses |
| Content screen | Scores names, wording, links and lookalike domains | Spam and impersonators |
Quarantine, never delete
The most expensive mistake in spam filtering is losing a real lead. A filter will occasionally get it wrong, so nothing should be silently thrown away. Send suspect leads to a separate junk view that someone checks weekly, with one click to restore.
Show the visitor the normal thank-you page either way. If a bot sees an error, its operator learns how to get around your filter. If it sees a success page, it learns nothing.
Ask better questions on the form
Removing fields raises lead volume, while adding the right ones raises lead quality. If your sales team is short of good conversations rather than short of leads, ask for a work email, company name, phone number and what the person needs. Someone with a real project answers these in seconds. A spammer often gives up or gives themselves away.
Measure the filter itself
Review the junk view regularly. If you find a real lead there, adjust the rule that caught it. If junk keeps reaching sales, add its pattern. A good filter is maintained, not installed once.
Key takeaways
- Junk has four types, and each needs a different defense
- Fake brand partnership emails are phishing, so check the domain before replying
- A captcha cannot stop a person, so screen the content too
- Quarantine suspect leads rather than deleting them