Investigate before celebrating
Compare traffic source and submission rate. Review disposable and invalid-address share. Check for bot patterns and duplicate submissions.
Add rate limits or challenges when abuse is confirmed; keep verification on so bad data never lands in the CRM.