As annoying as it is, why not use captcha verification when making new accounts. characters?
And maybe do it every once in a while if a person doesn't have a security token?
Although I don't think it'll be too effective
http://2.bp.blogspot.com/-Zuyrs5GjZg...6_65592125.jpg
