Skip to main content

Add Fraud Protection to Webflow

This guide walks you through installing Opportify's Fraud Protection script on your Webflow website and connecting it to your forms. Once set up, every form submission on your site will be analyzed for fraud signals in real time.


Prerequisites


Step-by-Step Setup

Step 1 — Open Opportify Admin and Go through Quick Start

Navigate to the Quick Start and complete at least Step 1 to 3. The Quick Start wizard guides you through everything needed to protect your website.

Opportify Admin Console — Quick Start


In the Quick Start Step 1, provide your Webflow site's domain in the allowlist. You only need the hostname — omit https:// and any trailing slashes.

Example: for https://my-business.webflow.io/ enter my-business.webflow.io, or if you use a custom domain, just enter example.com

Allowlist Your Website Domain

Next: Create a Form Endpoint in Quick Start. Click + New Endpoint, give it a descriptive name, and select a public key.

The Form Endpoint ties a specific form on your webpage to Opportify's Fraud Protection, so every submission is analyzed before it reaches your backend.

Create a Form Endpoint


Step 2 — Copy the Form Submit URL from Opportify

Copy the value from the Submit URL column.

Opportify — Form Endpoint Submit URL


Step 3 — Configure the Webflow Website in Design Mode

  • Open your Webflow project and enter Design mode.

  • Locate the form you want to associate with Fraud Protection and click on it to select it.

Webflow — Select Form

Clear Existing Form Actions

In the right-hand panel, click the Settings tab and find the Send to section. Delete all existing actions.

caution

Clearing existing actions will disable any current form submission handling and integrations that rely on this form (for example, Webflow-native storage, email notifications, and third-party tools). If you still need those behaviors, either recreate them using Opportify (for example, with email notifications and webhooks) or use a separate form that keeps the existing actions.

Webflow — Settings tab, Send to section

Add a New Custom Action

Click + Add action (or Custom) to add a new custom action to the form.

Webflow — Add Custom Action

Paste the Submit URL in Webflow

Back in Webflow, paste the copied URL into the Action URL field of the custom action and save.

Webflow — Paste Action URL


Step 4 — Setup the Fraud Protection Script

Return to the Opportify Admin Console

In the Opportify Admin Console, open Quick Start and go to Step 3 — Add Opportify's Fraud Protection Script to Your Website. Copy the script snippet shown in the first step — you will paste it into Webflow next.

Opportify — Copy Script 1

Opportify — Copy Script 2


Step 5 — Integrate to Webflow with Oportify Fraud Protection

  • In Webflow, navigate back to your project and open Site Settings.
  • In the left-hand navigation panel, click on the Custom Code section.

Webflow — Site Settings

  • Scroll down to the Footer Code section and paste the Opportify script there. Click Save Changes.
  • Publish your website

Webflow — Footer Code


Step 6 — Setup is Complete

All the required connections between Webflow and Opportify's Fraud Protection are now in place.

Return to the Opportify Admin Console and continue through the remaining Quick Start steps to fine-tune your setup:

  • Step 4 — Data Retention: Choose how long submission data is kept.
  • Alerts: Configure email or in-app alerts for suspicious submissions.
  • Webhooks: Export fraud signals and submission data to your own systems or third-party tools.

Viewing Form Submissions

After publishing, every form submission from your Webflow site will appear in the Form Submissions page of the Opportify Admin Console. For each submission you can see:

FieldDescription
Risk ScoreA numeric fraud risk rating assigned to the submission
Risk LevelA human-readable label: Low, Medium, High, or Critical
IP AddressThe originating IP of the submission
CountryGeo-location derived from the IP
EmailThe email address submitted, if collected
Submitted AtTimestamp of when the submission was received
Form EndpointWhich endpoint (and therefore which form) received the submission
Fraud SignalsIndividual signals that contributed to the risk score (e.g. disposable email, VPN detected, bot behavior)

You can filter submissions by risk level, date range, or endpoint to quickly identify and act on suspicious activity.