How FormCrab Hides Your Email Address While Still Letting People Message You

FormCrab replaces your real email address with a private form link. You give FormCrab the inbox where you want to receive messages, and it gives you back a link like formcrab.com/f/user_link that you can post publicly. Visitors type into that form instead of seeing your address, so scrapers and spam bots have nothing to harvest. Your real email stays in FormCrab's backend, and messages that pass its bot checks get forwarded to you.

The core mechanism

The whole trick is a substitution: a public link in place of a private address.

1. You provide a destination inbox. FormCrab needs to know where to send the messages people write to you.
2. FormCrab generates a private link. That link points to a hosted form page, not to your address.
3. Visitors submit through the form. They see a contact page, never your email.
4. Your address stays hidden. According to FormCrab, the address "stays private in our backend system," so it is never rendered on the page for bots to scrape.
5. Messages are forwarded to your inbox. Real submissions reach you; automated ones are filtered out.

Because the address never appears in the page source, the usual scraping approach — crawling sites for anything that looks like [email protected] — has nothing to find.

What happens to a message after it is sent

FormCrab describes a two-stage lifecycle for messages:

So the panel is a short-term holding area rather than a permanent archive. If you need a message long-term, keep it in your own mailbox.

Why the link approach blocks spam

FormCrab's comparison of "before" and "after" comes down to three differences:

• Scraping fails. With a raw address on a page, bots scan and steal it. With a link, there is no address on the page to steal.
• Bots are tested at the door. FormCrab says automated spam bots are "instantly tested and turned away," so only entries it judges to be from real visitors pass through.
• Your inbox stays clean. Marketing and sales spam that would normally flood a public address does not arrive, because the address was never exposed.

This is a filter-plus-concealment model, not just an alias. An alias hides the address but still accepts everything sent to it; FormCrab adds a bot check before forwarding.

Where the link works well

FormCrab lists these as intended placements, and they share one trait — a public page where you want contact without publishing an address:

• GitHub READMEs
• Social media bios
• Linktree-style link lists
• Notion public pages
• Static blogs
• Personal sites

If your situation is "strangers should be able to reach me, but I don't want my address in public," this fits. If you need to reply from your real address and want the recipient to see it, that is a different workflow — the form is for inbound contact.

Setup in three steps

FormCrab describes onboarding as taking about 30 seconds:

1. Hide your real email — tell FormCrab where you want new messages delivered.
2. Get your private link — FormCrab returns a ready-to-use form page.
3. Share and relax — post the link; real entries reach you and bots are blocked.

No code or setup is required, which is why it suits static pages and profiles where you cannot run a backend.

Limits worth knowing before you commit

• Retention is 30 days. Anything you want to keep should be moved out of the panel.
• You are trusting a third party with your address. The address is hidden from the public, but FormCrab itself holds it.
• Pricing is not stated in the material reviewed here. FormCrab has a pricing page, but no figures or plan details are given, so check that page directly if cost matters to you.
• Bot filtering is a judgment call. Any automated filter can occasionally misclassify; treat "only real messages get through" as the design goal rather than a guarantee.

If your goal is simply to stop your address from being scraped off public pages while still receiving genuine messages, the link-plus-filter model addresses exactly that problem.