[AQuantized]

Why not stop allowing registration except by manual whitelist? At least until the spammer lost interest.

[detaro]

Is that less friction than captchas?

[duxup]

How would that work?

Manually approve someone who registers ... then discover they're a spam bot?