Validation checks that the details a visitor submits are real before the lead reaches your destinations. It's a different question from qualification, which asks whether the lead fits your offer (see Qualify leads and track what happens next).
Where to find the controls
Open the funnel, select the Settings tab, then Validation. Switches save as you change them.
Control | What it does | Extra step for the visitor |
Phone verification (2FA) | Texts a 6-digit code. The form submits only after the visitor enters it. Set per variant. | Yes |
Validate phone numbers | Silently checks the number is real when the form submits. | No |
Validate email addresses | Checks the mailbox exists. Typos, throwaways and fake addresses are blocked. | No |
Work emails only | Rejects personal addresses such as Gmail, Outlook and Yahoo. Set per variant. | No |
TrustedForm | Certifies each lead with ActiveProspect TrustedForm and adds the certificate URL to the lead. | No |
Address autocomplete | Suggests real addresses as visitors type and fills the address fields. | No |
Your agent can set the same switches with update_funnel (validate_phone_enabled, validate_email_enabled, validate_work_email_enabled, trusted_form_enabled, address_autocomplete_enabled) and turn SMS codes on or off with set_sms_verification.
Validate phone numbers and email addresses
When Validate phone numbers or Validate email addresses is on, the check runs as the visitor submits. A value that fails shows an error under the field and the form doesn't submit:
Phone: "Please enter a real phone number."
Email: "Please enter a real email address."
Important: Phone validation checks US and Canadian (+1) numbers. With it on, a number that isn't a valid +1 number is rejected, so leave it off on funnels that take international numbers.
Work emails only is set per variant, so you can A/B test it. Select the button in its row, set each variant to Enabled or Disabled, then select Save verification. A personal address gets "Please enter a company email." Turn it on only when a company address is a real requirement for your offer. It doesn't use validation credits.
Require an SMS code
Phone verification (2FA) is the strongest filter. When a visitor submits, a Verify Your Phone Number window asks for the 6-digit code texted to them. They can Resend code or Change number, and the lead only goes through once the phone is verified. The text reads "Your [name] verification code is: 123456", where the name is a short one based on your domain or brand.
To turn it on:
Open the funnel's Settings tab, then Validation.
In Phone verification (2FA), select the button (it shows Off, All variants or Selected variants).
Set each variant to Enabled or Disabled.
Select Save verification.
You can also flip it per variant with the SMS 2FA switch in the variants table on the funnel's Overview tab. Your agent's set_sms_verification turns it on or off for every variant, and new variants inherit the setting.
Things to know:
Codes are sent to US and Canadian numbers only. Other numbers get "Enter a valid US or Canadian phone number."
Each verified phone uses one verification credit.
If the workspace runs out of credits, verification pauses but leads still come through, unverified. The funnel page shows a notice with an Add credits link, and those leads are marked UNVERIFIED in the Leads tab.
Test-drive links skip the code step. To test it, make a real visit with a number you can receive texts on.
Verification adds a step and blocks bots on purpose, so a verified variant usually converts less. Compare variants on qualified leads and cost per qualified lead instead of conversion rate.
The funnel's Analytics tab has a SMS verification / 2FA drop-off section. In the Leads tab, the Verification filter separates Verified, Unverified and Verification failed leads, and a lead that never finished the code step is marked SMS FAILED.
Verification credits
SMS codes and validation checks share one pool of verification credits.
What you use | What it costs |
One phone verified by SMS | 1 verification credit |
Email checks | 100 included every 30 days, then 1 credit per 10 checks |
Phone checks | 100 included every 30 days, then 1 credit per 10 checks |
Every workspace starts with 100 free verification credits. Owners and admins on a paid plan buy more from Settings > Billing with Buy credits: 100 credits for $10, 500 for $45 or 1,000 for $80. The Included credits card shows what's left, and the Phone verification (2FA) row shows the current balance. Your agent can read balances with get_credits.
When checks don't run
If a check can't run, the submission goes through unchecked instead of being blocked. That happens when:
The validation service is down or doesn't answer.
The included checks are used up and there are no verification credits left. Workspace owners and admins are emailed.
Checks spike past a daily safety limit, usually because a bot is hitting the form. Phone and email validation switch off, owners and admins are emailed, the funnel page shows a notice, and validation switches back on by itself as the day rolls over.
Certify leads with TrustedForm
Turn on TrustedForm when a lead buyer asks for consent proof. It records each lead capture with ActiveProspect TrustedForm and adds the certificate URL to every lead as xxTrustedFormCertUrl (with xxTrustedFormCertToken and xxTrustedFormPingUrl). The buyer claims the certificate in their own ActiveProspect account.
To turn it on for every funnel on a domain at once:
Go to Settings > Domains and select Manage on the domain.
On the About tab, turn on TrustedForm on every funnel.
Every page served on that domain then carries TrustedForm, whether or not the funnel's own switch is on. Turn it off to go back to per-funnel settings. Changing it updates the domain's published funnels. Your agent can set it with update_domain_tracking (trusted_form_default).
Destinations that receive the whole form get the certificate URL automatically. For Lead Prosper, Lead Distro AI and ActiveCampaign, map xxTrustedFormCertUrl to the buyer's field (see Map form fields to your destinations).
Capture verified addresses
Address autocomplete suggests real addresses as visitors type (Google Places). Picking one fills street, unit, city, state and ZIP. It needs the workspace's own Google Maps API key, billed to your Google Cloud project. If the key isn't connected yet, the row says so and links to where an owner or admin adds it.
When it's on, two more settings appear:
Suggestion countries: two-letter country codes, up to five (for example
us, ca). Blank suggests addresses worldwide.Require a suggested address: visitors must pick a suggestion to continue, so every lead has a verified address. An address Google doesn't know can't be submitted, so this trades some volume for complete addresses. Applies on next publish.
The address fields it fills are listed in Map form fields to your destinations.