Filter spam from webhook form submissions using honeypot and timing checks
Ready for 3.0Ready for 3.0. This template uses no nodes that n8n 3.0 removes. No removed nodes, versions or helpers found. Static check, last run 2026-10-19.
What this workflow does
This workflow has 6 nodes and runs when an HTTP POST request hits its webhook URL. It uses only n8n's built-in nodes.
How it runs
Trigger: When an HTTP POST request hits its webhook URL.
- Configure Spam Rules (Edit Fields (Set)): sets or maps fields
- Detect Spam (Code): runs custom JavaScript code
- Is Spam? (If): checks a condition and branches into true / false
- Silent OK (Spam Blocked) (Respond to Webhook): sends the response back to the webhook caller
- Forward & Respond (Legit) (Respond to Webhook): sends the response back to the webhook caller
Before you upgrade to n8n 3.0
Nothing in this workflow is removed in n8n 3.0, so it should import and run after the upgrade.
Nodes used (5)
- Webhook
n8n-nodes-base.webhook - Edit Fields (Set)
n8n-nodes-base.set - Code
n8n-nodes-base.code - If
n8n-nodes-base.if - Respond to Webhook
n8n-nodes-base.respondToWebhook
From the author
Who is this for? Website owners, agencies, or developers who receive contact form submissions via webhook and want to block bots and spam without CAPTCHAs, keeping the user experience clean and friction-free. How it works Your frontend sends a POST request…