I'm working on a service request form, between 5 and 10 fields (depending on the service). *And, possibly, a recaptcha that the Security team is asking us to add.
The case is a user requesting an on-demand service which is additional to a purchase (sometimes free of charge, sometimes involving a fee).
There's no validation of the purchase code or username with any DB. User will have to fill in names, contact phone and e-mail (with format validation only).
I've tried to push for options like "solve the spam without involving the user", or.. math operations, e-mail verification (link sent to user, which is also asking effort from the user's side), slider (question to answer with a switch), multiple choice questions... BUT Security isn't confident about these custom security checks.
What will you say about the security of a custom option like this: Show a random image of an object (related to the seller business) and offer 3 possible options (radio buttons) for the user to answer the correct one**. E.g: a)Pencil b)glasses c)dog
Maybe too childish, but easier to complete than a reCaptcha, for sure.
I need to keep it serious, but easy for the user. A gamified option could be too much for this form.
Or, any ideas on a service similar to NUcaptcha that is secure, already functioning, which I can only insert in my form without building it? Perhaps based on math operations or random easy questions instead of distorted book lettering?
thanks for your comments!