formcrab.com

FormCrab blocks spam bots by never exposing your real email address in the first place. Instead of publishing your address, you share a private form link (formcrab.com/f/your_link). Messages submitted through that link are screened before they reach your inbox: automated bots are "instantly tested and turned away at our door," while only real entries written by real visitors pass through. You don't configure filters or blocklists yourself — the screening happens on FormCrab's side.

The two layers of protection

FormCrab's anti-spam approach works in sequence, and each layer addresses a different failure mode.

Layer 1: Your address is never published

The most common way spam finds you is scraping. Bots crawl websites, social bios, and code pages looking for anything that looks like an email address, then sell or reuse those addresses for spam lists. FormCrab's site describes this directly: "Bad computer programs quickly scan websites to steal written email addresses."

Because your real address stays "private in our backend system," there is nothing on your page for a scraper to collect. This layer doesn't filter spam — it removes the input spam depends on.

Layer 2: Submissions are screened before delivery

Hiding your address stops scrapers, but it doesn't stop someone (or something) from filling out the form itself. That's what the second layer handles. According to FormCrab, "Automated spam bots are instantly tested and turned away at our door," and "Only real entries written by real visitors pass through safely to your clean inbox."

The site frames this as a "Smart Bot Blocker" that runs automatically. There is no mention of a user-facing rule builder, keyword blocklist, or CAPTCHA configuration — the screening is presented as built in.

What this actually protects you from

The phishing and scam row is worth noting: FormCrab's argument is that "Hackers find your real address easily" when it's public, so hiding it removes you as an easy target. That's a reduction in exposure, not a guarantee that no malicious message ever reaches you.

What you don't have to do

FormCrab's pitch is explicitly low-effort. The site says the setup is "Ready in 30 seconds" and that the links are "Ready-To-Use" with "No code or setup needed." In practice that means:

• No filter rules to write or maintain
• No allowlists or blocklists to curate
• No spam-folder triage as a routine habit

If you've used a form plugin or a self-hosted contact form before, the difference is that spam handling isn't a task you own — it's part of the product.

Where the link can go

The same link works anywhere you'd otherwise paste an email address. FormCrab lists GitHub Readmes, social bios, Linktree links, Notion public pages, static blogs, and personal sites. In each case the trade is the same: visitors get a working way to reach you, and you avoid publishing the address itself.

A realistic example

Say you maintain a small open-source project and want a contact method in your README. The usual move is to write [email protected] in the file. Within days, scrapers can pick that up and your inbox starts collecting marketing mail and fake "your account has been suspended" phishing attempts.

With FormCrab, the README instead contains formcrab.com/f/your_link. A real user with a genuine question fills out the form and the message reaches you. A bot that crawls the README finds a form URL, not an address — and if it tries to submit through the form, the bot screening rejects it.

What to verify before relying on it

The mechanism described is credible for the two problems it targets (scraping and automated form submissions), but a few things are worth checking yourself rather than assuming:

• Delivery reliability. The site promises "Safe Mail Delivery Protection," but the only way to know messages actually arrive is to send a test submission and confirm it lands.
• What "tested" means. FormCrab doesn't publish the specifics of how bots are detected. If your use case attracts targeted (human) spam rather than automated spam, screening designed for bots may not catch it.
• Retention. Messages live in the panel for 30 days before deletion. If you need a longer archive, forward or export them yourself.
• Pricing and account requirements. The site links to a pricing page, so check current terms before assuming any tier is free.

You can set up a FormCrab private link in about 30 seconds, with no code and no extra configuration. You tell FormCrab which inbox should receive your messages, it generates a clean form page link, and you share that link anywhere you would otherwise post your email address. The result: visitors can write to you, but your real email stays hidden behind the link.

What You Need Before Starting

FormCrab is built for people who want to receive messages without exposing a personal email address on public pages. Before you begin, have the following ready:

• A working email address you can access — this is where your new messages will be delivered.
• A place to share the link — for example a GitHub README, a social media bio, a Linktree, a Notion public page, a static blog, or a personal site.
• No coding tools or hosting setup — the site states that ready-to-use links require no code or setup.

Step-by-Step Setup

Step 1: Tell FormCrab where to send your messages

Enter the email address where you want to receive new messages safely. This address stays private in FormCrab's backend system — it is never shown to the people who contact you.

Expected result: FormCrab knows which inbox to deliver real messages to, while keeping that address invisible to visitors and bots.

Step 2: Get your private link

FormCrab generates a simple, clean form page for you, ready to use instantly. The link follows this pattern:

formcrab.com/f/user_link

Your real email sits hidden behind that link. Anyone who opens it sees a contact form, not your address.

Expected result: You have a shareable URL that collects messages on your behalf.

Step 3: Share the link and let it work

Post the link wherever people might want to reach you:

• GitHub READMEs
• Social bios
• Linktree links
• Notion public pages
• Static blogs
• Personal sites

Expected result: Real visitors submit real messages that arrive in your inbox. Automated spam bots are tested and turned away at the door, so they never reach you.

What Happens to Your Messages and Data

Understanding the flow helps you decide whether this fits your needs:

The 30-day auto-delete is a deliberate privacy choice: FormCrab states it does not keep your logs forever.

Why This Setup Blocks Spam

The mechanism is straightforward. Spam bots crawl the web looking for written email addresses — the kind you would normally paste into a website page or a Twitter bio. Because FormCrab never displays your address, there is nothing for those bots to scrape. Meanwhile, the form itself screens incoming submissions, so automated entries get rejected while genuine ones go through.

This is why the setup works without any spam-filter configuration on your side: the protection is built into the link rather than added afterward.

Common Questions During Setup

Do I need to write any code? No. The site states that ready-to-use links need no code or setup.

How long does it take? The site describes the process as "ready in 30 seconds" across the three steps above.

Can I use it on more than one page? Yes — the same link can be placed on any page or profile where you want to be reachable.

What if I want to stop receiving messages? Since your email is never exposed, removing the link removes the contact channel. The site does not describe a separate deactivation step in the available material.

When This Setup Makes Sense

Choose FormCrab's private link approach if you want to be contactable on public pages but do not want your personal address scraped, spammed, or targeted by phishing. It fits developers, creators, and anyone maintaining a public profile or personal site.

If you need a full contact-management system with CRM features or team routing, this is a simpler tool focused on one job: hiding your email while still receiving real messages.

FormCrab.com is a contact-form service that lets you receive messages through a private link instead of publishing your real email address. You share a URL in the form formcrab.com/f/your_link, and messages submitted through it are forwarded to your inbox while your actual address stays hidden in FormCrab's backend. It suits anyone who needs a public contact point — a GitHub README, social bio, Linktree, Notion page, static blog, or personal site — but doesn't want that address scraped, spammed, or phished.

How it works

The mechanism is a relay, not a new mailbox:

1. You register a destination address. You tell FormCrab where you want new messages delivered.
2. FormCrab issues a private link. You get a clean form page at a formcrab.com/f/... URL, ready to use immediately.
3. Visitors submit through the form. They never see your email — it stays in FormCrab's system.
4. Messages reach your inbox. Entries that pass the bot check are delivered to you; the site says messages are also kept in your panel for 30 days and then deleted.

The site describes the flow as taking about 30 seconds and requiring no code or setup.

What problem it solves

Publishing a raw email address on a public page exposes you to three distinct risks that FormCrab separates out:

The trade-off is structural: you gain privacy and spam filtering, but you add a third party between you and your correspondents, and your contact flow depends on that service staying up.

Where it fits

FormCrab lists these placements as intended uses:

• GitHub READMEs
• Social media bios
• Linktree links
• Notion public pages
• Static blogs
• Personal sites

The common thread is a public page where you want a contact option but not a permanent, harvestable address. If you already use a dedicated throwaway address for public contact, FormCrab's main advantage — hiding the address entirely — matters less.

What to check before committing

• Pricing. The site has a pricing page at formcrab.com/pricing, but the available material doesn't state the cost or whether a free tier exists. Check that page directly before relying on it.
• Data retention. The stated policy is 30 days in the panel, then deletion. If you need a permanent archive of contact messages, save them from your inbox.
• Deliverability. Since messages are relayed, confirm that FormCrab's sending domain isn't filtered by your mail provider — send yourself a test submission first.
• Account requirements. The material doesn't specify what sign-up involves, so treat the "30 seconds" claim as a setup estimate rather than a guarantee.

If your goal is simply to stop spam without changing how people reach you, a masked address or a contact form on your own domain may be sufficient. FormCrab is the better fit when you want the address itself to be invisible and are comfortable routing contact through a third-party link.

FormCrab replaces your real email address with a private form link. You give FormCrab the inbox where you want to receive messages, and it gives you back a link like formcrab.com/f/user_link that you can post publicly. Visitors type into that form instead of seeing your address, so scrapers and spam bots have nothing to harvest. Your real email stays in FormCrab's backend, and messages that pass its bot checks get forwarded to you.

The core mechanism

The whole trick is a substitution: a public link in place of a private address.

1. You provide a destination inbox. FormCrab needs to know where to send the messages people write to you.
2. FormCrab generates a private link. That link points to a hosted form page, not to your address.
3. Visitors submit through the form. They see a contact page, never your email.
4. Your address stays hidden. According to FormCrab, the address "stays private in our backend system," so it is never rendered on the page for bots to scrape.
5. Messages are forwarded to your inbox. Real submissions reach you; automated ones are filtered out.

Because the address never appears in the page source, the usual scraping approach — crawling sites for anything that looks like [email protected] — has nothing to find.

What happens to a message after it is sent

FormCrab describes a two-stage lifecycle for messages:

So the panel is a short-term holding area rather than a permanent archive. If you need a message long-term, keep it in your own mailbox.

Why the link approach blocks spam

FormCrab's comparison of "before" and "after" comes down to three differences:

• Scraping fails. With a raw address on a page, bots scan and steal it. With a link, there is no address on the page to steal.
• Bots are tested at the door. FormCrab says automated spam bots are "instantly tested and turned away," so only entries it judges to be from real visitors pass through.
• Your inbox stays clean. Marketing and sales spam that would normally flood a public address does not arrive, because the address was never exposed.

This is a filter-plus-concealment model, not just an alias. An alias hides the address but still accepts everything sent to it; FormCrab adds a bot check before forwarding.

Where the link works well

FormCrab lists these as intended placements, and they share one trait — a public page where you want contact without publishing an address:

• GitHub READMEs
• Social media bios
• Linktree-style link lists
• Notion public pages
• Static blogs
• Personal sites

If your situation is "strangers should be able to reach me, but I don't want my address in public," this fits. If you need to reply from your real address and want the recipient to see it, that is a different workflow — the form is for inbound contact.

Setup in three steps

FormCrab describes onboarding as taking about 30 seconds:

1. Hide your real email — tell FormCrab where you want new messages delivered.
2. Get your private link — FormCrab returns a ready-to-use form page.
3. Share and relax — post the link; real entries reach you and bots are blocked.

No code or setup is required, which is why it suits static pages and profiles where you cannot run a backend.

Limits worth knowing before you commit

• Retention is 30 days. Anything you want to keep should be moved out of the panel.
• You are trusting a third party with your address. The address is hidden from the public, but FormCrab itself holds it.
• Pricing is not stated in the material reviewed here. FormCrab has a pricing page, but no figures or plan details are given, so check that page directly if cost matters to you.
• Bot filtering is a judgment call. Any automated filter can occasionally misclassify; treat "only real messages get through" as the design goal rather than a guarantee.

If your goal is simply to stop your address from being scraped off public pages while still receiving genuine messages, the link-plus-filter model addresses exactly that problem.

FormCrab keeps messages in your panel for 30 days, then deletes them automatically. According to the site, messages are first sent to your mailbox, stored inside your panel for 30 days, and then removed "for your safety." FormCrab also states it does not keep your logs forever. Your real email address stays hidden in the backend system rather than being exposed on the page.

What happens to a message after someone submits it

The flow described on FormCrab is:

1. A visitor writes to you through your private link (for example, formcrab.com/f/user_link).
2. The message is delivered to the email address you chose when setting up the link.
3. A copy is kept inside your FormCrab panel for 30 days.
4. After 30 days, that copy is deleted automatically.

So the 30-day window applies to the copy held in your panel — not to the message sitting in your own email inbox, which you control.

What FormCrab says about data retention

The stated design goal is privacy: keep your address out of public view and avoid holding onto message data longer than needed.

Why this matters for privacy

Showing your real email on a website or social bio makes it easy for scrapers and bots to collect. FormCrab's approach is to give out a link instead, so your address is never written on the page. Combined with the 30-day auto-delete, the idea is to limit both exposure and how long your message data lingers.

Practical implications

• If you need a long-term archive, save or export messages from your own mailbox — the panel copy disappears after 30 days.
• If you want minimal data stored, the automatic deletion means you don't have to clean up manually.
• If you rely on the panel as your only record, set a reminder to check it before the 30-day window closes.

For exact terms, see FormCrab's Terms and Privacy Policy, linked from the site.