Web 2 Lead & webform spam - Ideas - Salesforce Trailblazer Community
Trailblazer Community

All Ideas

Idea Details

Post an Idea
4,560  Points
Open - Not Planned
Open - Not Planned

Web 2 Lead & webform spam

Campaigns & Leads

Webforms, and also the web to lead feature in SalesForce can be used to sent spam. Once they have got your OID, this can be used to sent you leads fully automated.

Salesforce should create a feature where it is possible to define the origin of the webform. If it is not in the list of approved websites (HTTP referrer), it should reject the form.

This doesn't seem a difficult feature and it helps to optimize your leads. Not it's possible you receive a lot of leads with the type "A HREF" that just consume time. Hope this starts a new interesting discussion.

Merge Idea · Flag

Latest Comment from Salesforce

  • Meredith Brown - 6 years ago

    An easy solution is to use a custom script, or one of the many plugins such as the WordPress to Lead plugin or the Drupal Webforms add on, or hosted forms like FormAssembly.

    If you have Enterprise and higher, you can disable the Web to Lead functionality and use the API to get your leads into Salesforce.  This is not an option for Group and Professional so try to keep your Org ID hidden from the start.

    As for stopping spamming of the form itself, there's a lot of solutions out there (e.g., Captchas), but if use a plugin or a hosted form provider, then that's normally a feature of the form itself.

    Hope this helps!

  • Upvotes
  • Downvotes



from AppExchange

Help us to keep IdeaExchange clean by pointing out overlapping ideas. We'll investigate your suggestion and merge the ideas if it makes sense.



Thanks for your merge suggestion. We will review it shortly and merge the ideas if applicable.

Salesforce takes abuse situations very seriously. Examples of abuse include but are not limited to posting of offensive language or fraudulent statements. To help us process your request as quickly as possible, please fill out the form below describing the situation. For privacy and security reasons, the final outcome of an abuse case may not be revealed to the person who reported it.


Thank you for your feedback. We take abuse seriously and will investigate this issue and take appropriate action.