A few pointers on Anti-Spam combat:
www.xyphos.com hasn't had any spammers dispite the fact that there is no verification requirement enforced.
the reason for this is a small mod I made to the forum's registration process, since most spam comes from bots.
First, I changed the variable name of the anti-spam captcha input field.
while captchas do detur some spam, the advanced bots will crack them easy.
however, most bots also have forum registration variables hardcoded and don't have support to dynamically change them.
so when a bot tries to register, it'll fail the captcha right off the bat, even if the captcha is cracked.
Second, in case the first fails, I added a new "hidden" registration var to the form and gave it a dummy value.
this dummy value is then altered to the correct value via javascript, since most bots are hardcoded and don't use javascript at all.
this allows for browser-users to register just fine with javascript enabled.