Unfortunately there's no real guaranteed way to get rid of bots outside of doing the Korean thing and demanding the SSN equivalent from every account. Of course the American SSN is not nearly as protected as foreign equivalents, so I can't say I would like this solution.