If you have recently noticed fewer contact form enquiries coming through your WordPress website, your marketing may not be the problem.
In some cases, the issue is sitting quietly in the background with reCAPTCHA.
A number of WordPress websites have started experiencing problems with contact forms after changes to the way Google manages reCAPTCHA keys. This can affect websites using plugins such as Contact Form 7, Elementor Forms, Gravity Forms, WPForms, Wordfence and other form or security plugins that rely on Google reCAPTCHA.
For business owners, the frustrating part is that the form may still look like it is working. A potential customer fills it out, clicks submit and assumes the enquiry has been sent. But behind the scenes, the form may fail validation, display an error or never send the enquiry through properly.
That means lost leads, missed bookings and a lot of confusion.
What has changed with Google reCAPTCHA?
Google has been moving classic reCAPTCHA keys into the Google Cloud Console. This means older reCAPTCHA keys may now need to be managed through a Google Cloud project rather than only through the older reCAPTCHA admin area.
For many website owners, this migration has caused confusion because the setup is now more technical than it used to be.
Previously, setting up reCAPTCHA was usually as simple as creating a site key and secret key, adding them to your WordPress plugin and moving on. Now, some users are being asked to manage their keys inside Google Cloud, check project access, confirm key settings and review billing requirements if they exceed the free usage allowance.
When everything is linked correctly, your forms should keep working. But if the keys have not migrated properly, the wrong key type is being used or the website plugin is still connected to old details, contact forms can stop submitting correctly.
Common signs your reCAPTCHA is causing form issues
You may have a reCAPTCHA issue if you notice:
- Contact form enquiries suddenly drop off
- The form shows an “Invalid site key” or similar error
- The form spins but never submits
- Users say they submitted an enquiry but you never received it
- Spam protection errors appear in your form plugin
- The form works for some people but not others
- Enquiries are not reaching your inbox or CRM
This can be especially hard to spot because many business owners do not test their own forms regularly. The first sign is often a quiet inbox.
Why this matters for small business websites
Your website contact form is often one of the most important conversion points on your website.
If someone is ready to enquire, book, request a quote or ask a question, you want that process to feel simple. A broken form creates friction at the worst possible moment.
For service-based businesses, this can mean missed leads for:
- Website enquiries
- Appointment bookings
- Quote requests
- Consultation forms
- New client intake forms
- Event registrations
- Download forms
- Product or wholesale enquiries
Even a few days of form issues can mean missed revenue, especially if you are running Google Ads, SEO or social media campaigns that are driving traffic to your website.
How to check if your WordPress forms are affected
The first step is simple: test your forms properly.
Do not just look at the form on the page. Actually submit a test enquiry from the front end of the website and check whether it arrives in the correct inbox.
When testing, check:
- Does the form submit successfully?
- Do you see any reCAPTCHA error messages?
- Does the enquiry arrive in the correct email inbox?
- Does the enquiry appear in your WordPress form entries, if your plugin stores them?
- Does it still work on mobile?
- Does it still work in an incognito browser window?
- Is the form connected to the correct reCAPTCHA version?
It is also worth checking your website’s error logs, form plugin settings and spam protection settings.
How to fix the issue
If your form is affected, the fix will depend on how your website is set up.
In most cases, you will need to check your Google reCAPTCHA keys and update your WordPress website settings.
Start by logging into the Google account that was used to create the reCAPTCHA keys. From there, check whether the keys have been migrated into Google Cloud and whether you still have access to the project they are connected to.
You will also want to confirm that the key type matches your website setup. For example, if your WordPress plugin is expecting reCAPTCHA v3 but your key is set up as reCAPTCHA v2 Checkbox, the form may not validate properly.
Once you have confirmed or recreated the keys, add the updated site key and secret key into your WordPress form plugin or security plugin. Then clear your website cache and test the form again.
What about billing?
This is the part that has caused a lot of confusion.
Google reCAPTCHA still has a free usage allowance, but billing may need to be enabled in Google Cloud if usage exceeds the free monthly assessment limit. For many small business websites, normal contact form usage may stay within the free allowance.
However, if a website receives a high number of form submissions, bot traffic or automated assessments, it may exceed the free allowance and need billing enabled to continue working correctly.
This is one reason many small business owners and agencies are reviewing whether Google reCAPTCHA is still the simplest option for their websites.
Should you switch to Cloudflare Turnstile?
For many WordPress websites, Cloudflare Turnstile can be a strong alternative.
Turnstile is Cloudflare’s CAPTCHA alternative that helps verify real users without relying on traditional image challenges. It is also promoted as privacy-focused and free to get started, which makes it appealing for small business websites that want spam protection without the added complexity of Google Cloud billing and project management.
There are WordPress plugins available that make Turnstile easier to connect with common forms, login pages, WooCommerce and other website areas.
For many small business websites, Turnstile may be the simpler long-term option, especially if the main goal is to protect contact forms from spam while keeping the user experience smooth.
What we recommend
If your website relies on contact form enquiries, do not assume everything is working.
Test every important form on your website, including your contact page, booking forms, quote forms, landing page forms and any hidden campaign forms connected to Google Ads or social media campaigns.
If you are using reCAPTCHA, check that:
- Your keys are active
- Your keys are connected to the right domain
- Your key type matches your WordPress plugin settings
- Your Google Cloud project is accessible
- Billing is set up if your usage requires it
- Your form plugin is up to date
- Your website cache has been cleared after changes
If you want a simpler setup, it may be worth moving from Google reCAPTCHA to Cloudflare Turnstile.
A broken contact form can quietly cost your business enquiries without you realising.
With Google’s reCAPTCHA changes, now is a good time to check your website forms and make sure your enquiries are still coming through properly.
A quick test today could save you from missing valuable leads tomorrow.
