Has RS Joomla addressed the spam getting past the captcha issue. We are getting bombarded with spam mail..200-300 per day.

You say that you are 100% sure it's from the form and not just mail that get send to a specific mail address.
The spam mail you get do you see them in the submission administrator panel in the backend of Joomla!?

wilco.alsemgeest wrote:
I am starting to see the same thing on one domain.
The submissions are found in the administrator panel (index.php?option=com_rsform&task=submissions.manage)

I'm also having the same issue. However, I deleted all the submissions and now I'm getting emails but no submissions into the backend. Any suggestions how they might be bypassing the submission forms and sending directly to or through one of the forms?

Directly is difficult to answer.
Many people in the netherlands uses info@ mail addresses, so every spammer tries that e-mail address.
I'm not sure how it works in other countries, but when you use a default mail address with the same title before the @ everybody can try to send spam to that address.

When you see the mails in the administrator panel you have a other problem.
I would say use captcha and if you already use it, try one which is more difficult.
Otherwise I would not know how this is possible.

Maybe tech support has some ideas.
Maybe I can see the problem when I have got the link to your website.

I know this thread is a little dated; however, I just found it while searching for something else.

Let me tell you that if you are seeing submissions in the database, then obviously the info is coming through the form. Do you have a weak captcha challenge? Perhaps. There is another possibility.

I learned some time ago that there are people (live human beings) paid almost nothing to sit in Internet cafes, home, an office, wherever, and complete registration and other forms. Typically these people are paid a very low wage per hour, and sometimes get a bonus for the most registrations completed.

Using this method, you could have any type of captcha you want, and the registration will still get by. Keep in mind that a captcha is designed to keep out bots and other automated methods of registration, while letting humans that correctly answer the captcha challenge proceed. Since these are human beings completing the forms, the process is functioning correctly.

Once somebody perfects a registration process that only lets those you desire register, then we might have a better system.