For a few weeks, my website had a perfect spam record. Not one junk message. I’d built a filter I was proud of, and every time I opened a clean inbox I gave myself a small nod. The nod turned out to be premature, because the filter was also catching customers.
The filter was a honeypot, a hidden field that no human visitor can see. Spam robots read the code instead of the screen, so they fill in every field they find, including the invisible one, and any message that arrives with the hidden field completed gets thrown away without a sound. Tidy, elegant, and free. What I’d forgotten is that browser autofill, the helpful feature that types your name and email for you, also fills in fields no human can see. My filter couldn’t tell the difference between a spam robot and a busy person letting their browser do the typing, so it quietly discarded both.
A storefront doorbell that stops working never announces itself. The shop just gets quieter, and the owner starts blaming the weather, the season, the economy. My inbox was that doorbell. Real people were pressing it, and I heard nothing, and I read the silence as a slow month.
Why broken forms stay broken
A broken contact form is the most expensive quiet problem a business website can have, because it presents as weak demand. You’ll question your prices, rewrite your homepage, and second-guess your services long before you suspect a form that worked fine last year, since nothing on the screen looks any different. The failure hides in the one stretch of the journey neither you nor your visitors can see, the gap between the submit button and your inbox. In my case there was even a dashboard that would have told me: my own analytics showed people visiting the contact page and no messages arriving, a mismatch that was sitting in plain view for anyone who looked. I’ll admit I wasn’t looking. It’s the strongest argument I know for glancing at your website’s numbers even in weeks when everything feels fine; those same numbers once showed me a very different quiet problem hiding in plain sight.
The ten-second insurance policy
Once a month, go to your own website from your phone and send yourself a message through the contact form, exactly the way a customer would, autofill and all. Put a repeating reminder in your calendar so it actually happens. If the message lands in your inbox, you’ve spent ten seconds confirming the doorbell rings. If it never arrives, you’ve found the leak while it’s still small.
And if it never arrives, resist the urge to shrug and try again later. Check your spam folder first, since a misdelivered message points at a different fix than a swallowed one. Then check whether your form keeps its own record of submissions inside the website, because finding your test message stored there but missing from your email narrows the problem to the delivery leg in about a minute. Whatever you find, you now have something specific to hand your web person, which beats “I think the form might be broken” by a mile.
Three questions for your web person
If someone else looks after your site, whether that’s a freelancer, an agency, or a maintenance plan like mine, these three questions will tell you how safe your enquiries really are. Start here: does the spam protection fail safe, meaning a wrongly-flagged human still gets stored somewhere a person can review, instead of vanishing? Then: are form submissions saved inside the website as well as emailed, so a mail hiccup can’t erase a lead? And the one nobody asks: when the email provider has a bad day, how would we ever know? Good setups have calm answers to all three. If the answers come back foggy, you now know exactly what to fix, and it will cost far less than the customers it’s been costing you.
A form that fails silently is the most expensive bug on a website, because you never see the leads you lost. Checking the whole path, from form to inbox, is part of my site audit. If you are not certain your enquiries are arriving, book a call and we will find out.
Leave a reply