Spam landing in inbox despite being identified as spam

Plugin was working well with Fluent Forms for several weeks – but in the last few days we’ve been seeing some spam landing in our inboxes – always the ones identified in the log as “Contact form data denied” – rather than the ones identified as “denied”. They’re just as spammy – often with thousands of spam attacks noted. Very annoying.

The spam validation setting is “Mark as Spam” (the default) – but I can find no explanation of what the other 2 settings actually do in comparison. (Note: you should fix the typo in the second option – it says “Make the form submission as failed” instead of “Mark…”)

The page I need help with: [log in to see the link]