[Triple A Racing]

Originally Posted by Zack P.

It is not as simple as you say:
https://www.dropbox.com/s/20llqyrr479lg8f/Screen%20Shot%202018-03-27%20at%209.33.57%20AM.png?dl=0, it still needs few more entries

Enabling reCAPTCHA on an XC5 Contact Page is very easy to do. The references provided by @qualiteam are quite clear.

The google account setup / data that's required etc isn't an XC issue, that's something that's within your own area of control / administration. We have reCAPTCHA enabled on the Contact Us page on both live and all of our dev stores and it works very well on all of them. They are all independent Google data sets FWIW.

In addition, if you have sufficient access on your own server, tech knowledge etc, there are many actions that you can easily invoke to minimise spam, including the one you mentioned initially i.e. mimicking your own server / domain as the spam sender. If you don't, your hosting provide should / will. Again this is something that's within your own area of control / administration not XC.