Honeypots are hidden form fields that are detectable by bots. By identifying form submissions made to these fields, malicious bot activity can be flagged and blocked. Decoy forms function similarly by inviting bots to fill them out, exposing their true nature.