My contact page use cloudfare turnstile, so before anyone can use the form to post a comment, they have to be verified first by turnstile. I think something like this might be easy to integrate into your AI Chatbot. Adding this to my contact page was very simple… two lines of code.
And this goes in the actual contact form (or in your case, the ai widget) <div class="cf-turnstile" data-sitekey="XXXXXXXX-XX-XXXX-XXXX" data-callback="javascriptCallback"></div>
(with the user’s sitekey)*
Unfortunately, it’s impossible to enable the spam protection using the Cloudflare turnstill now. I am really sorry!
We’ll try to consider this opportunity in the future, especially if more users upvote this idea
In the meantime, you can enable the spam protection using Honeypot and I see the Support Team has already shared this solution with you - How to stop bot spam in your AI Chatbot