Spam usually happens when Odoo captcha or ReCaptcha isn’t configured or validated properly. Start by checking your site keys, domain settings, and API responses. Make sure the ReCaptcha version matches your Odoo setup. Clear cache, test the widget, and enable server-side validation. This helps block bots, reduce fake entries, and secure your forms.