Your suggestions seem reasonable... if it gets to the point of an all-out War On Spam-bots. Unless things get that bad, it may be sufficient simply to make it a little more difficult for the spammers (so that they go hit on other sites). Meanwhile, I doubt that many spammers are going to go to trouble to create the mutually-supportive accounts (and certainly not actually spending money by hiring live users).