If your spam prevention measures utilize a database, such as StopForumSpam, or other similar services, it's certainly not very reliable. This is just my opinion, however I feel using something like Google's ReCaptcha is the most reliable solution, and is typically not a terrible burden for users. Unless something like that is implemented, I'm afraid these bots are going to continue capitalizing on the situation.