• Seems like they basically match the form fields (and meta data like IP address and user agent) against some predefined rules. I don’t see that this would work reliably to prevent spam from robots.