There should be a spam protection method addes to the email lock function. This doesn’t have to be captcha (I prefer not). The method in the following link works very good for my own contact forms: http://trevordavis.net/blog/wordpress-jquery-contact-form-without-a-plugin. It creates a box that is not visible for users and that should be left blank if the form is to be submitted. Spam bots tend to fill all form fields.
Maybe also a spam protection method that should be implemented in the form builder.