How LEI System eliminated API abuse and form spam — without a single CAPTCHA

LEI System's contact form was buried under automated spam, drowning real registration enquiries in junk the team had to clear by hand.

At the same time, competitors were hammering its public APIs — scraping pricing and entire company and LEI lists to copy the data and undercut it. There is no human on an API call to show a puzzle to, so a CAPTCHA was useless against the bigger problem.

They needed one solution that covered the contact form and the APIs, stayed invisible to real people, never routed visitor data through a US ad-tech vendor, and could go live without re-architecting anything.

They had already tried other anti-bot services — none of them stopped the sophisticated, persistent attackers. That ruled out the usual suspects. It is the exact gap TrustSig was built for.

Across its first 30 days on TrustSig — roughly 30,000 requests to the protected contact form and APIs — 23,800 automated submissions and abusive API calls were blocked, about 79% of all traffic.

Most importantly: zero false positives. Not one genuine applicant was wrongly stopped — because verification never asks a human to do anything, and never sits in their way.

The contact inbox went back to real enquiries only, the pricing and company-list APIs stopped leaking to competitors, and the team stopped losing hours to clearing junk.