Zoho CRM's Web Forms have picked up several genuinely useful enhancements since they were first introduced, particularly around spam prevention, which was previously one of the more common complaints from teams using public-facing forms.
Zoho CRM now includes native Spam Detection for webforms, addressing a long-standing pain point where teams received a steady stream of fake or bot-generated leads through public forms, even with CAPTCHA enabled. This works alongside, rather than instead of, CAPTCHA and manual approval workflows.
CAPTCHA support for Zoho CRM web forms has rolled out progressively by data centre and edition, starting with new sign-ups and Professional edition accounts on the India data centre, then expanding further. If you're on an older account and don't see the CAPTCHA option yet, it's worth checking whether it has reached your specific data centre and edition.
If Spam Detection or CAPTCHA hasn't reached your account yet, a combination of enabling manual Lead approval for web-form submissions and reviewing the Approval queue regularly remains an effective interim approach, catching spam before it becomes a live Lead in your pipeline.