What do you use for captcha?
I like CiviHoneypot.

I don't know why the author says to use ReCaptcha first.  I find ReCaptcha too invasive and I've successfully used CiviHoneypot to solve carder attacks.