There isn't a form in the world that doesn't get spammed at times. reCaptcha is designed to defeat bots. If someone is entering spam directly in your form, there is no defeating that. As a rule, use a firewall, use an snti-spam tool in addition to recaptcha, use recaptcha v3. Make sure you don't have Formidable's honeypot disabled.