Becoming a client is by invitation only, speak to your Oracle account manager and join our waiting list.
April 2024
Eloqua Forms: Block Bot Spam
How to Stop Eloqua Form Spam Using Google reCAPTCHA v3
The Problem
Eloqua Form Spam is Ruining Your Data
If you’re using Eloqua for lead generation, there’s a good chance you’ve been hit with spam form submissions. Bots can flood your Eloqua landing pages with junk data, skewing campaign performance, triggering false leads, and frustrating sales teams with poor-quality contacts.
You need more than a required field or hidden honeypot—you need a reliable way to stop Eloqua form spam at the source.
The Solution
Google reCAPTCHA v3 for Eloqua Forms
Google reCAPTCHA v3 is NOT that stupid stupid thing that shows traffic lights or whatever annoying stuff they can think of, the users see's nothing
Google reCAPTCHA v3 is a frictionless spam protection tool that works silently behind the scenes. It analyzes user behavior to assign a trust score, letting you decide whether to accept, challenge, or reject a submission—without ever bothering legitimate users.
It’s an ideal fit for Eloqua landing page spam prevention, especially when paired with backend validation AND it is highly recommended to use it on your website too.
How to do it
Add reCAPTCHA v3 to Eloqua
Step-by-step guide to block spam bots on Eloqua landing pages.
1. Register Your Site with Google reCAPTCHA
Head to the reCAPTCHA Admin Console and:
Select reCAPTCHA v3
Add your Eloqua landing page domain(s)
Copy your Site Key and Secret Key
2. Insert the reCAPTCHA Script in Your Eloqua Template
Open your Eloqua landing page template and add the following script inside the
tag:
3. Trigger Token on Form Submit
Just before〈/body〉- insert this JavaScript to generate the token when someone submits the form:
This ensures a valid token is submitted with your form—essential for verifying that the submission is not spam.
4. (Optional) Validate the Token Server-side
If you're using external form processing, you should validate the token with Google:
For users relying solely on Eloqua’s native form processing, consider using a secure webhook or cloud function that validates the token before posting to Eloqua. This ensures that only trusted submissions make it into your database.
5. (Optional) Hide the Badge
By default, reCAPTCHA v3 displays a badge in the bottom-right corner of the page. If this interferes with your design, you can hide it using CSS, but you must still include attribution somewhere on your page, per Google’s Terms of Service.
Here’s how to hide it:
Add this somewhere on your landing page (footer is a good spot):
Sprint Task Breakdown
Sprint Item: Implement reCAPTCHA v3 to eliminate Eloqua form spam
Subtasks:
Register and configure reCAPTCHA keys
Add script to landing page templates
Embed token-generation logic on submit
Insert hidden field into all forms
Build or configure webhook for backend validation (optional)
QA across mobile and desktop
Roll out to all active campaigns
Monitor spam levels pre- and post-launch
Level of Effort
Estimated Time
Task
Time Estimate
Google reCAPTCHA setup
30 mins
Landing page template updates
1 hour
QA and testing
30 mins
Backend validation endpoint (optional)
2–4 hours
Deployment to all campaigns
1–2 hours
Total Estimated Effort
3–8 hours
Why Use Pl8ypus
Spam-free, stress-free Eloqua campaigns
Eloqua is a platform built for growth, governance, and results, the power lies in:
At Pl8ypus, we specialize in Eloqua campaign execution—and that includes securing your forms from spam bots. We don’t just apply quick fixes; we build maintainable, scalable solutions that protect your data and keep your reporting clean.
From reCAPTCHA to custom webhook integrations and form optimization, we’ve got your back.