The Harder Part of Lead Gen Now Is Knowing What Is Real

The first instinct after a fake inquiry burns a week of your team's time is to make the form harder to fill out. 

Add fields, require a company email, put the calendar behind a qualification step. 

It feels like the responsible move, and it is the wrong one, because an inquiry good enough to fool your sales team is good enough to answer every question you add, while the people who give up are the buyers who only wanted to ask you something.

The harder part of lead generation now is knowing which inquiries are real, and that work belongs behind the form, inside the intake process, where a company, a domain, and a person get checked before anyone spends an hour on them. 

Your front door stays as easy to walk through as it has always been.

‍

Why are fake business inquiries so hard to spot?

Fake business inquiries are hard to spot because the good ones are built to clear exactly the checks a company already has.

KnowBe4 sells security awareness training, and on July 15, 2024 it hired a fake employee. The candidate cleared four video interviews, a background check, and reference checks, because the identity was stolen from a real US person and the photo was, in the company's own description, "an AI fake that started out with stock photography." 

The Mac workstation sent to the new hire started loading malware at 9:55pm the night it arrived, and that is when the security team found out who they had hired.

Hiring runs more verification than any sales process does, and a company that teaches social engineering for a living still ended up onboarding someone who did not exist. 

Gartner expects one in four candidate profiles worldwide to be fake by 2028. Whatever you are thinking of adding to your contact form is a lighter check than four video interviews.

‍

What does adding friction to your contact form actually cost?

Friction costs you the buyers who were only ever going to spend thirty seconds on you, and at the start of a deal that is a lot of the good ones.

Someone comparing three development firms is not filling out your longest form first. They are sending a short message to all three and watching who answers well, so every field you add moves you down that list. 

The cost never surfaces, because a form nobody completed does not create a record, and the deal you lost that way is invisible to the same report that counts the fake one as a conversion.

Filtering out anything that is not human has the same problem in a different shape. Traffic from autonomous systems that move around the web and act on it grew 7,851% last year, and only one half of one percent separates the rate of benign automation from the rate of malicious automation. 

A research agent building a shortlist for a real founder and a credential stuffer look close to identical at your front door, and a filter set to reject automation rejects the founder's agent along with it.

‍

What does treating every inquiry as suspicious cost a growing company?

Suspicion costs you the inquiries you were wrong about, and you never find out which ones those were.

The visible number is easy to total. Reported losses to imposter scams reached $3.5 billion in 2025 with business impersonation close to a billion of that, and business email compromise ran 24,768 complaints against just over $3 billion in adjusted losses, roughly $123,000 every time one works.

The number that decides how fast you grow never gets totaled. After a company gets burned, reply times on good inquiries stretch out because someone is checking the domain before answering, and a prospect who wrote three sentences instead of six reads as a risk. 

Teams lean harder on referrals, because a name from an existing client is the one introduction nobody has to verify, and a company that only trusts referrals has capped its growth at the size of the network it already has.

The error runs in one direction. Being too trusting costs a week and gets discussed in a meeting. 

Being too cautious costs a deal you never knew existed and gets discussed never, which is why companies drift toward closing up and call it prudence.

‍

How do you verify an inbound lead before replying?

Verifying an inbound lead means checking identity, domain, and consistency between the request and the requester, because those are the parts a fake inquiry cannot produce on demand.

Nine checks cover most inbound:

• Does the email domain match the company's actual website, and how old is it
• Is that domain a character or two off one belonging to someone real
• Does the phone number connect to the business
• Does the person appear on the company site or on LinkedIn
• Does the project match what the company actually sells
• Is the budget out of proportion to the detail provided
• Would this same message work sent to a hundred firms
• Does a third party enter the conversation before a call does
• Is your team being asked to use an unfamiliar link, scheduler, portal, or document

All of that is checkable in a few minutes, and the prospect never answers a single extra question to make it possible. 

That is the whole argument for doing this work inside intake.

For FindFill we built a geolocation-based job marketplace that connects verified nurses with open healthcare positions in their area, with a six-step profile wizard handling nurse verification and a clear path from signup to job-ready. 

A facility filling a shift tomorrow needs the credential to be real, and the wizard carries that without turning signup into an interrogation. 

We believe that business is built on transparency and trust, and that good software is built the same way, which for intake means the checking is something the business can see and repeat.

‍

How should you measure lead quality from a campaign?

A campaign report that counts submissions cannot tell you whether the campaign produced business, because a fake inquiry converts exactly like a real one and costs you more after it does.

A lead intake system should record:

• Which campaign, landing page, and form produced the submission
• Whether the lead passed verification, failed it, or was never checked
• Whether it became a real opportunity
• Whether suspicious submissions cluster around one message, one offer, or one form
• Whether fake submissions repeat a domain pattern, a budget figure, or a phrase
• Cost per verified opportunity, alongside cost per form fill

Run those numbers once and the ranking usually changes, because cost per lead looks best on whichever campaign attracts the least qualified traffic. 

Until verification gets tracked alongside volume, your marketing lead is optimizing spend against a number that includes the leads that cost you money.

‍

What should you check in your lead intake process?

Before changing anything about your forms, your team should be able to answer seven questions about what already happens today.

1. Where does a submission land first? Email, Slack, a CRM, and a spreadsheet each create a different blind spot.
2. Who does the first review? Name the person, and name their backup.
3. What gets verified before the first reply? Above a dollar threshold you set, check the company, the domain, the person, and the project.
4. What is off limits on a first inquiry? Opening attachments, clicking scheduler links, sharing client information, and paying any fee belong on a written list.
5. What stops the process? Domain mismatches, payment complications, third-party fees, refusal to take a call, and manufactured urgency.
6. When does a record enter the CRM? Unverified leads in the CRM make every report downstream worse.
7. How is lead quality reported back to marketing? Verification results belong in the campaign numbers.

Custom software handles most of that on its own, through structured intake, domain and email checks, blocked domain lists, verification statuses, and routing rules that decide what reaches a salesperson. 

This is ordinary development work, and it costs less than a quarter of your sales team treating real buyers as suspects.

Staying reachable is going to take more engineering than it used to, and that is a trade worth making, because the alternative caps your growth at the people you already know. 

Open your last twenty form submissions and mark the ones that got verified before someone replied. 

That number tells you whether the checking lives in your systems or in somebody's gut.