If you receive a lot of spam or fake orders, use Invisible reCAPTCHA, a Google service that tracks user activity and separates bots from humans. Most users won't see the captcha at all, and the "suspicious" ones will be asked to solve one of the usual tasks.
How to set up
To connect, you will need a Site key and a Secret key. To get them, register your website in the reCAPTCHA service.
Registering in the Google Invisible reCAPTCHA
Important: in the reCAPTCHA type field, select reCAPTCHA v3.
Copy the keys you received after the registration.
Setting up your website
In the website admin panel, go to Settings → General settings → Google Invisible reCAPTCHA.
Add the Site Key and Secret Key in the appropriate fields on the site.
Check the Activate reCAPTCHA box.
Check the Use for all forms on site box to make the captcha work not only in the registration, authorization, password recovery forms, but also for checkout.
Save the changes.
