We've spent years building CAPTCHAs to block bots. Some of those bots are now paying customers

Weird thing I read about. Cloudflare said automated traffic passed human traffic for the first time this year, something like 57% bot vs 43% human. Not all spam either, a chunk of that is AI agents actually trying to complete real purchases and forms for real people.

Except forms are terrible at letting that happen. The same AI agent tested across different sites went from 85% success on a simple site down to 27% on a form heavy one. And CAPTCHA solvers already beat most CAPTCHAs over 80% of the time anyway, so at this point it mostly just annoys real people and legit agents while actual bots walk right through.

So are we protecting our forms at this point or just filtering out our own customers? Has anyone actually run their own form through an agent to see where it breaks? Curious what people are finding.

The source for the stats.

u/bogdanelcs — 2 months ago