Skip to main content
WebflowCustomer feedback

Webflow customers are reporting receiving spam form submissions through Webflow's native system, even when their forms are configured to use third-party handlers like Formspark, causing...

What happened

Webflow customers are reporting receiving spam form submissions through Webflow's native system, even when their forms are configured to use third-party handlers like Formspark, causing frustration over a perceived platform flaw.

Source

RedditSep 20, 2026By u/Berkhovskiyev

r/webflow

Where are these Webflow Form Submissions coming from

upvotes
7
comments
3

Post

Highlighted: the lines this signal was extracted from

I launched a new client website last week and the forms are all set up with Formspark with a honeypot and Botpoison. But today I received 4 spam form submissions all delivered by Webflow. None of the forms have Webflow set up for form handling. How on earth am I getting these?

Also quoted as evidence

  • [comment u/Key-Balance-9969] Same. All sites I've built in webflow have my own custom script forms embedded with a honeypot. And I'm somehow getting form spam lately.

reddit.com/r/webflow/comments/1wlpifc/where_are_these_webflow_form_su...Read the full source

Comments on the post

2 of 3 comments
  • “What’s happening appears to be an infrastructure flaw in Webflow’s form handling. Spammers are able to generate submissions through Webflow’s form endpoint even when the form is configured to submit directly to a third-party service - such as Mailchimp, Basin, or a custom endpoint - and is not intended to use Webflow’s submission process at all. Webflow’s recommendation to deploy reCAPTCHA is also p”

    u/jumper4445 points · Sep 21, 2026View

  • “Same. All sites I've built in webflow have my own custom script forms embedded with a honeypot. And I'm somehow getting form spam lately.”

    u/Key-Balance-99691 points · Sep 20, 2026View

Extracted by Autobound

From the Signal API record
Signal
Customer feedback

What this signalsUser posts often show product pain before it reaches reviews or churn.

Subreddit
r/webflow
Event date
Sep 2026

Companies

  • FormsparkAlso named
  • BotpoisonAlso named
  • MailchimpAlso named
  • BasinAlso named

The full record

From the Signal API record

Numbers

Mentions
11

Details

Timing
In progress
Category
Security
Virality
Low
Post kind
Text
Prominence
Core
Company's role
Vendor

Topics and mentions

Topics

  • security
  • platform issue
  • spam
  • forms

Flair

  • Question

Products named

  • Webflow Forms

Extraction

Sentiment
Negative
Detected
Sep 20, 2026
signal_type
reddit-company
signal_subtype
customerFeedback

Use this data

Get every Reddit signal for Webflow and the companies you sell to, in the tools you already use.

  1. Ask Claude about it

    Connect Autobound to Claude, Claude Code or Cursor with MCP. Then ask: “What changed at Webflow this week?”

  2. Send it to your own tools

    The Signal API returns Reddit signals for any list of companies as JSON, for your CRM, warehouse or app.

  3. Try it free

    Sign up and spend your free credits on the companies you sell to.

    Start Free1,000 free credits

The API returns more than this page shows

This page shows a preview. The full reddit-company record in the Signal API and MCP can also have these 8 fields. Some fields are empty for some signals.

Company

  • linkedin_urlValue in the API
  • industriesValue in the API
  • employee_count_lowValue in the API
  • employee_count_highValue in the API
  • revenueValue in the API
  • descriptionValue in the API

Signal

  • signal_nameValue in the API
  • associationValue in the API
Show the full JSONThe record on this page and the API request

GET /v1/signals/242f1e64-308f-5bbd-a143-694811a95ad2 returns this record as JSON. POST /v1/companies/enrich returns every signal for webflow.com.

{
  "signal_id": "242f1e64-308f-5bbd-a143-694811a95ad2",
  "signal_type": "reddit-company",
  "signal_subtype": "customerFeedback",
  "detected_at": "2026-09-20T18:57:21+00:00",
  "company": {
    "name": "Webflow",
    "domain": "webflow.com"
  },
  "data": {
    "nsfw": false,
    "stage": "none",
    "awards": 0,
    "timing": "in_progress",
    "topics": [
      "security",
      "spam",
      "forms",
      "platform issue"
    ],
    "post_id": "1wlpifc",
    "summary": "Webflow customers are reporting receiving spam form submissions through Webflow's native system, even when their forms are configured to use third-party handlers like Formspark, causing frustration over a perceived platform flaw.",
    "category": "security",
    "comments": [
      {
        "url": "https://www.reddit.com/r/webflow/comments/1wlpifc/comment/pb5gtbw/",
        "depth": 0,
        "score": 5,
        "author": "jumper444",
        "excerpt": "What’s happening appears to be an infrastructure flaw in Webflow’s form handling. Spammers are able to generate submissions through Webflow’s form endpoint even when the form is configured to submit directly to a third-party service - such as Mailchimp, Basin, or a custom endpoint - and is not intended to use Webflow’s submission process at all.\n\n Webflow’s recommendation to deploy reCAPTCHA is also p",
        "posted_at": "2026-09-21T12:34:58.000Z",
        "author_url": "https://www.reddit.com/user/jumper444/"
      },
      {
        "url": "https://www.reddit.com/r/webflow/comments/1wlpifc/comment/pb26tic/",
        "depth": 0,
        "score": 1,
        "author": "Key-Balance-9969",
        "excerpt": "Same. All sites I've built in webflow have my own custom script forms embedded with a honeypot. And I'm somehow getting form spam lately.",
        "posted_at": "2026-09-20T23:16:02.000Z",
        "author_url": "https://www.reddit.com/user/Key-Balance-9969/"
      }
    ],
    "evidence": [
      "[post] I launched a new client website last week and the forms are all set up with Formspark with a honeypot and Botpoison. But today I received 4 spam form submissions all delivered by Webflow. None of the forms have Webflow set up for form handling.",
      "[comment u/Key-Balance-9969] Same. All sites I've built in webflow have my own custom script forms embedded with a honeypot. And I'm somehow getting form spam lately."
    ],
    "virality": "low",
    "post_date": "2026-09-20T18:57:21.000Z",
    "post_kind": "text",
    "post_text": "I launched a new client website last week and the forms are all set up with Formspark with a honeypot and Botpoison.\n\nBut today I received 4 spam form submissions all delivered by Webflow. None of the forms have Webflow set up for form handling.\n\nHow on earth am I getting these?",
    "sentiment": "negative",
    "subreddit": "webflow",
    "event_date": "2026-09",
    "post_flair": [
      "Question"
    ],
    "post_title": "Where are these Webflow Form Submissions coming from",
    "prominence": "core",
    "source_url": "https://www.reddit.com/r/webflow/comments/1wlpifc/where_are_these_webflow_form_submissions_coming/",
    "entity_role": "vendor",
    "post_author": "Berkhovskiyev",
    "upvote_ratio": 1,
    "mention_count": 11,
    "mention_surge": true,
    "subreddit_url": "https://www.reddit.com/r/webflow/",
    "total_upvotes": 7,
    "comments_total": 3,
    "total_comments": 3,
    "event_date_text": "today",
    "other_companies": [
      {
        "name": "Formspark",
        "role": "alternative",
        "domain": "formspark.io"
      },
      {
        "name": "Botpoison",
        "role": "partner",
        "domain": "botpoison.com"
      },
      {
        "name": "Mailchimp",
        "role": "alternative",
        "domain": "mailchimp.com"
      },
      {
        "name": "Basin",
        "role": "alternative"
      }
    ],
    "post_author_url": "https://www.reddit.com/user/Berkhovskiyev/",
    "signal_category": "feedback",
    "comments_included": 2,
    "products_mentioned": [
      "Webflow Forms"
    ]
  }
}

Long text fields are shortened on this page.

Looking up one signal by its id is free. Enrich costs 2 credits per signal returned; a call with no results is free.