Fake Enquiries and Spam Leads: How Bots Distort Your Reporting and How to Stop Them

Imagine your form submissions doubled this month. The dashboard looks fantastic, the cost per lead has dropped, and yet the phone hasn't rung any more than usual. If that sounds familiar, you may not be looking at growth. You may be looking at bots.



Automated scripts submit contact forms around the clock, and every fake submission can look, to your reporting, exactly like a customer who wanted to talk to you. The real damage isn't the time spent deleting junk emails. It's the decisions you make on numbers that were never real.

How Bots Distort Your Reporting

Depending on how your form and tracking are set up, spam submissions can quietly corrupt several things at once:



• Conversion rates look better than they are, because every fake submission fires the same conversion event as a genuine one.
• Ad platforms learn the wrong lessons. If Google Ads counts form submissions as conversions, its bidding can start favouring the traffic that attracts bots rather than buyers.
• Channel attribution gets muddied, so a spike from a random source convinces you to double down on the wrong channel.
• Your team loses time chasing fake numbers while real enquiries wait in the same inbox.

What Fake Enquiries Actually Look Like

Why Local Context Matters When You Filter

Cracking down on spam creates a second risk: blocking real customers. Filters built around English-only text, Anglo-style names, or Australian-only phone numbers will quietly reject genuine enquiries in diverse communities. Three suburbs we work in show how different the picture can be (all figures from the 2021 Census):

Sutherland — population 11,570. English (34.6%) and Australian (33.9%) are the most commonly reported ancestries, so the community is predominantly Anglo-Celtic. Enquiries that fall well outside the local pattern tend to stand out faster here, though behavioural checks still matter. It sits at the heart of the Sutherland Shire market.

Rockdale — population 15,475. No single group dominates. Chinese is the largest reported ancestry at around 13% of responses, ahead of Australian and English, with Macedonian, Lebanese, Greek, Filipino and Indian ancestries also well represented, and about 18% of residents have a father born in Nepal. Only about a third of residents were born in Australia. A business here receives genuine enquiries in several languages, with names, scripts and phone formats that a basic filter may wrongly call suspicious.

Hurstville — population 31,162. The most concentrated of the three: roughly 47% of residents report Chinese ancestry, and China and Nepal are the two most common countries of birth, with more than 21,000 residents born overseas. Messages written in Chinese characters or sent from international numbers can be entirely legitimate here, such as a family member overseas arranging a service for relatives. Both Rockdale and Hurstville fall within our St George service area.

The lesson is that blocking by language, name pattern or country is the wrong tool. Bots behave the same way in every suburb, so behaviour-based checks protect you everywhere without turning away the community you are trying to reach.

How to Stop Them Without Losing Real Leads

A layered approach works far better than any single fix:



• Add a honeypot field: a hidden input humans never see but bots fill in automatically.
• Use invisible bot scoring, such as Cloudflare Turnstile or reCAPTCHA v3, instead of image puzzles that frustrate real customers.
• Check time-to-submit. A form completed in under two seconds wasn't filled in by a person.
• Validate on the server, not just in the browser, and reject messages stuffed with links where they make no sense.
• Rate-limit repeat submissions from the same session or IP address.
• For high-value enquiries like quote requests, add a quick email or SMS confirmation step.
  

Cleaning Up the Numbers You Already Have

Stopping the bots is half the job. The other half is making sure your reporting can be trusted again. Fire conversion events only after a submission passes validation, not on the button click. Report on qualified leads from your CRM rather than raw form submissions. Annotate the spike dates in GA4 so nobody misreads them later, and expect your reported conversions to fall once the junk stops. That drop is good news, because the remaining number is real. If you run Google Ads, importing qualified leads back from your CRM teaches bidding to chase customers instead of scripts.

If your lead numbers and your actual enquiries don't match, it's worth a proper look at how your forms and tracking are set up. Every SEO and lead generation campaign we run starts with making sure the data is real, and local search optimisation, is only worth measuring when it reflects genuine customers. Get in touch and we'll audit your forms, tracking and spam protection.

Frequently Asked Questions

Do spam enquiries hurt my Google rankings?

Not directly. The bigger risks are corrupted conversion data, wasted ad spend when bidding learns from fake leads, and a slower response to real customers buried among the junk.

Will bot protection reduce my genuine enquiries?

Invisible methods like honeypots, time checks, and bot scoring add almost no friction. Image puzzles and over-strict rules are what cost you real leads, so test your own form on a phone after any change.

How can I tell if my conversion numbers are inflated?

Compare form submissions against qualified leads in your CRM and calls actually received. If submissions are climbing but sales conversations aren't, or you see overnight bursts of near-identical messages, bots are likely involved.

Should I block overseas traffic to stop spam?

Rarely. In multicultural areas like Rockdale and Hurstville, genuine enquiries can come from relatives or contacts overseas or in other languages. Behaviour-based checks catch bots without excluding real people.