that adds a hidden security key to your forms when users interact with them. Since automated spam bots typically do not execute JavaScript, they will not have this key — and their submissions will be blocked.