Marketo Engage Form CAPTCHA integration

Steven_Vanderb3
Marketo Employee
Marketo Employee

With our August 2022 release we are introducing a CAPTCHA integration on Marketo Engage forms using Google reCAPTCHA v3. This feature will be enabled for all customers on the evening of September 20th, 2022 (US time). 

 

A previous version of this post mentioned feature enablement would occur on September 6th. In order to deploy some additional infrastructure enhancements to increase form performance, we are having to delay enablement until September 20th. Thank you for your patience.

 

So, what exactly is CAPTCHA and how can it help marketers? CAPTCHA is an acronym that stands for Completely Automated Public Turing Test to tell Computers and Humans Apart. It is a type of test used by websites and services to determine whether the interacting user is a human or a bot. There are multiple CAPTCHA types such as image, audio, mathematical, or word challenges and multiple CAPTCHA vendors.

 

If you have forms on the web, it is likely you have been targeted by bots at least once. This could include spikes in rapid form submissions from a single IP address, submissions made in languages or from regions your business does not market to, or values submitted that do not make sense contextually to what your form was asking for.

 

Marketo Engage has chosen to use a score-based CAPTCHA implementation using Google reCAPTCHA v3 to tackle this problem. This type of implementation does not challenge your leads with images, words, or mathematical equations in order to minimize friction interacting with your form. Instead, the likelihood of the submission being from a bot is calculated by the CAPTCHA vendor and this information is included in the submission’s metadata. This allows you to flag, quarantine, delete, or ignore submissions using Smart List and Smart Campaigns based on their scores.

 

Using CAPTCHA for lead segmenting

 

Filled Out Form activities will have new attributes:

 

CAPTCHA Provider

This field captures the CAPTCHA provider configured for the subscription. Marketo Engage currently only integrates with Google reCAPTCHA so the value will always be “reCAPTCHA”.

 

CAPTCHA Raw Score

This field captures the raw score returned by the CAPTCHA provider. It will always be a value between 0.0 and 1.0. For reCAPTCHA v3, scores closer to 1.0 are likely human and scores closer to 0.0 are likely bots.

 

CAPTCHA Normalized Score

This is a normalized version of the score returned by the CAPTCHA provider as interpreted by Marketo Engage. This also includes normalized error messages returned by the provider or that occurred during processing. The values can be:

 

  • TRUSTED: Score of the submission >= 0.5. The submission is likely from a human.
  • SUSPICIOUS: Score of the submission < 0.5. The submission is likely from a bot.
  • MISSING: The CAPTCHA provider did not return a score for the submission.
  • QUOTA: The monthly quota of evaluations set by the CAPTCHA provider has been reached. Contact the CAPTCHA provider to purchase more evaluations.
  • FAILED: An error occurred during processing.

These attributes are visible in the Activity Details when digging into the Filled Out Form activity. They can also be used in the Filled Out Form filter and the Fills Out Form trigger.

 

Ideas how to use score-based CAPTCHA for marketing:

  • Excluding low scoring submissions from campaigns that trigger on Form Fills such as scoring campaigns, campaigns that send emails (such as Contact Us or Sign Up), and campaigns that sync new records into the CRM
  • Create Smart Lists that pull records with recent suspicious form submissions. Use these Smart Lists to exclude records from Smart Campaigns or simply for periodic review
  • Build trigger campaigns to automatically Marketing Suspend or Blocklist records with low scoring form submissions (but do not forget to have a process to review and revert if needed!)

Questions & Answers

 

Is CAPTCHA applied to all Forms when enabled?

 

CAPTCHA must be enabled on a per form basis. This enables you to control the volume being submitted to your CAPTCHA provider as to not overwhelm purchased volumes. Once enabled on a form, the setting will be carried over whenever you cloned the enabled form.

 

Will other CAPTCHA providers or implementations be added in the future?

 

We will consider additional providers in our future roadmap based on user feedback, but none are planned at this time.

 

Why did Marketo Engage decided on a score-based solution such as reCAPTCHA v3? Why cannot I set up an image challenge?

 

Our teams performed market and user research when deciding on which type of CAPTCHA implementation to create for Marketo Engage. Our research told us that marketing administrators were hesitant to implement any solution that added additional friction to filling out the form such as image challenges or puzzles. Additionally, our partners at Google recommend the practice of “shadow banning” suspicious submissions by excluding them from audiences within the Marketo Engage subscription rather than blocking them on the front end. By scoring form submissions and building workflows to determine how the person should be processed you can ensure that you are not creating a high barrier for conversion or blocking false positives.

 

We are considering ways to enhance the CAPTCHA solution to give you more control over incoming submissions as they are being submitted to react to suspicious scores.

 

How many form submissions can the reCAPTCHA implementation handle per month?

 

This limit is set by Google. Free reCAPTCHA v3 keys can handle up to 1,000,000 submissions per month at no charge and our form traffic data shows this is sufficient for most customers. If your business requires more than 1,000,000 calls a month you can convert your key to reCAPTCHA Enterprise which offers additional volumes of submissions.

 

Why doesn’t CAPTCHA assign a score to a Person record? Why is it only stored on the Filled Out Form activity?

 

CAPTCHA measures the likelihood of a specific browser session interacting with your forms of being a bot. This score could change across different sessions or different devices. Since it is not a static value and is attributed to a single Form submission, it does not make sense to make the CAPTCHA score a static value stored as a lead field.

 

Do you intend on enhancing the CAPTCHA functionality? What is next on the roadmap?

 

This is only the beginning of our CAPTCHA implementation. We are evaluating additional enhancements on the roadmap such as:

  • The ability to define the “action” parameter that is logged in reCAPTCHA with the submission.
  • The ability to block or discard submissions that fail to meet certain score thresholds
  • Expanded controls on enabling or disabling CAPTCHA on forms
  • Additional language support
  • Customization of the reCAPTCHA legal disclaimer

 

We will of course be listening to your feedback for future roadmap ideas too!

17066
27
27 Comments
Katja_Keesom
Level 10 - Community Advisor + Adobe Champion

Hi @Steven_Vanderb3 I think this is a good development! When it comes to including other CAPTCHA providers in the future, it would be great to see if any US-based providers would be suitable. I do sometimes see concerns from customers in Europe that data is submitted to the US using the reCAPTCHA from Google.

Michael_Florin
Level 10

@Steven_Vanderb3 wrote:

With our August 2022 release we are introducing a CAPTCHA integration on Marketo Engage forms using Google reCAPTCHA v3. This feature will be enabled for all customers on the evening of September 20th, 2022 (US time). 


Hey - was CAPTCHA enabled? And if so: Where can I find it?

katie_hassall_K
Level 1

Hi Michael - I've just seen the function enabled on our forms! As MKTO mentioned it's enabled on a per formed basis. Go to the Setting page of edit form mode (you know where you enable the known visitor form, set up TY page etc). It should be there if it's applied to your instance 🙂 

Captcha.PNG

Michael_Florin
Level 10

Thanks Katie - I see it now. Swear it wasn't there yesterday! 🙂

 

EDIT: Well, I can enable CAPTCHA on my form, but after submitting it I don't see anything in the Filled Out Form activity. Neither do I see new options in the "Filled out Form" filter. Something seems to be missing. (I am on the Amsterdam pod btw).

Kristine_Richmo
Level 1

Hi, I was able to successfully enable CAPTCHA in my Marketo instance and I've been able to figure out how to enable on each of my forms. Thanks to the awesome documentation provided! Now, per the June/August Release webinar linked from this page https://experienceleague.adobe.com/docs/marketo/using/release-notes/previous-releases/2022/release-n...  the Marketo rep said that we'd be able to create Smart Lists and Smart Campaigns to look at bot activity using the CAPTCHA scoring attributes, but when I tried setting up a Smart List I noticed these options aren't there yet. Do you know when this reporting functionality will be in place?  Thanks!

Kristine_Richmo_0-1663956060092.png

 

Tyron_Pretorius
Level 9 - Champion

@Steven_Vanderb3 I am having issues similar to @Michael_Florin where none of the constraints on the activity filters or triggers are appearing

 

A more upstream issue is that I cannot submit forms when I enable CAPTCHA.

 

Should I raise this as a Marketo support ticket or is the Marketo CAPTCHA integration just not ready yet?

SanfordWhiteman
Level 10 - Community Moderator

@Steven_Vanderb3 I am having issues similar to @Michael_Florin where none of the constraints on the activity filters or triggers are appearing

Same!

Katja_Keesom
Level 10 - Community Advisor + Adobe Champion

@Steven_Vanderb3 and same here.

anne_sample_f5
Level 4

Hi @Steven_Vanderb3 -

 

I'm attempting to set this up and it seems to be working, except that the CAPTCHA itself is not visible. The div that should contain it exists, but has an attribute of data-size="invisible". Do you or anyone else know how to resolve this? Here's the test page in my sandbox where I'm seeing this issue.

SanfordWhiteman
Level 10 - Community Moderator

@anne_sample_f5 reCAPTCHA v3 is not visible, by definition.