There is no form on my website, but I keep receiving spammy submissions. Why?

Most likely, there is a form on your website—it’s just not visible. At Rapid Fire, we’ve come across this issue many times, with clients assuring us that no Webflow forms remain on the site. However, the culprit is always the same: A form is present on one of the published pages, but it’s hidden using CSS, with the display property set to none (e.g., display: none;). This is not the same as visibility: hidden;—while the latter keeps the element in the HTML but hides it from view, display: none; removes the element visually but not from the code.

Why do bots still submit hidden forms?

Bots don’t interact with websites the same way humans do—they don’t rely on visual cues. Instead, they crawl through the raw HTML code. If a form exists in the code, even if it’s hidden from human users, bots can still detect it and submit spam through it. This is how spam content can reach your inbox, even when the form seems non-existent.

How to Identify Hidden Forms

• Inspect your code: Use browser developer tools (right-click → Inspect) to search for form elements.
• Check manually all pages: Hidden forms may appear on old, forgotten pages, both dynamic and static. Inspect elements on each page in the Navigator.
• Use Style Selector tab to identify form-related classes and their locations. This approach will only work if you maintain clear and meaningful naming conventions for your classes.