Or, you could just do the obvious. Only let people register with a real name.
Only activate their account after you have validated their identity, and sh.t can all the obviously fake acc'ts about lovingcialis, playingpoker, and buyingviagra. LOL.

Spambots can theoretically be a nightmare, but without admin activation, they are pretty powerless.