Need help to stop scammers mass emailing on contact form, already using recaptcha
I have scammers that are using my contact form to mass email account holders and they send about a message a minute, or sometimes a few messages in a minute. Not sure if they are doing this by hand or with a bot? I have the recaptcha on there - but it sometimes allows it to go through even if the code is not right.
Any suggestions on how to combat this? I tried requiring an account to send the contact form, but then they just create an account, login, and start sending. I've tried blocking ips but they just keep changing their ip. This is getting frustrating, and my users are not happy!
This is with the contact form not with comments. I don't allow comments on my site.