Suspicious SPAM adresses signing up

I am new to Klaviyo and opened an account less than a month ago. I am still creating my forms, and I've published one on a hidden page in Shopify. I don’t get how spammy subscribers can bypass mandatory fields. My form asks for name, email, and phone number; all fields are mandatory. However, I am getting a bunch of spammy subscribers with email only. How is that possible?

@DianaSantos They aren’t being bypassed. Bots can fill out those fields automatically. Do you have double opt-in enabled in your list?

Bots can fill out those field, but the field is empty in their profile. I don’t have double opt in, and I will not add to this specific form because of a marketing strategy I am using.

@DianaSantos It is possible for bots to enter blank spaces as data. This is a known issue the team is working on in my answer above! Unfortunately though, using single opt-in makes it harder to manage bot activity. At least with double opt-in you can be sure the only profiles subscribed to your list are real people. 

If you want to maintain single opt-in, you can create a segment with conditions you notice for patterns of these bot profiles and periodically suppress them. 

• How to manage email suppressions and delete profiles in bulk

Having the same issue - here’s what I did.

Created a new segment called ‘+’ (used the AI feature) - segment defined by ‘email addresses that include the + symbol’

That then trawls and adds all these unwanted addresses to the ‘+’ segment.

Then daily I look at the segment to see if they are all rubbish and when confirmed I go to:

Settings (bottom left) / Other / Profile Maintenance / Remove Profiles / Select a List to delete / + / delete people

Purged!

I am getting these emails subscribe also.. And then they receive the email flows and even open them.. how can that be if they are BOTS, and then some are marked by them as SPAM? 

@bythehorns Typically a malicious bot will target forms or checkout pages and flood them with real emails they are looking to attack. Since these are real emails, they might respond in different ways: open, click, mark as spam or even reach out. What we would recommend is enabling double opt-in and turn on ReCaptcha if you can on your checkout page.