@schalk_bl combine three invisible layers so real buyers never have to click traffic lights: (1) Cloudflare Turnstile in non-interactive mode, (2) a hidden honeypot field plus a server-side check that the form took at least 2.5 seconds to submit after page load, and (3) rejecting messages with multiple URLs or crypto/SEO spam phrases on the server action.