Spam via elementor form

I receive spam from elementor forms. I switched the elementor form protection on and the widget shows in the form.
In the log i see /wp-login.php being blocked succesfully so it looks like turnstile has been setup correct.
Any suggestion what can cause this or how to debug it?