I've had good experience with Cloudflare Turnstile. HIPB did something similar before too: https://www.troyhunt.com/fighting-api-bots-with-cloudflares-...