I’m sharing this as it may help others and I’m also looking for any tips and suggestions on how to improve our ability to block spam leads.
We’re a B2B SaaS and have this issue with Google PPC ads. We get anything from 2-20 spam leads a day.
These are the steps we have taken to at least slow the volume down. They are not automated bots unfortunately.
- Block IP and ASN for offending leads. ASN is a broad stroke wheras IP blocking is limited as the perpetrators use muliple VPN / Virtual Server and apparently hacked networks
- Implement email and phone validation on form
- Track all lead submissions in Cloudflare WAF to track activity in near real-time
- Where possible report IP addresses to their ISP abuse email address or phone, provide Cloudflare logs
- Block direct traffic to landing pages
- Block traffic from outsite USA
- Implemeted ClickCease to further limit bad traffic
- Implemented Smartlook to track user screen so we can see their behavior
- TODO: Implement restriction so users cannot Paste data into the webform - this is what I need help with now.
Overall Cloudflare has been a very powerful tool.