Spam coming through contact forms is a perennial problem and unavoidable on an unprotected form. The best way to protect your form is to use Google ReCaptcha which is supported by most contact form plugins.
The specific implementation method varies depending on your contact form but the general process is the same:
- Register a Google ReCaptcha API Key
- Install the key on your WordPress website