The easiest way to tell if a player is a bot, or even a real person-controlled account but running a script of some kind, is to attempt to communicate with it and/or open a trade window.