Contact forms are without fail prime candidates for spammers be they human or automated ‘bots’. They can also be use in brute force attacks to gain access to your website administration.
CAPTCHAs have come a long way since having to answer a simple challenge question or solve a mathematical formula.
Where contact forms are in use the most suitable amd secure form of CAPTCHA should be enlisted.