Are there some best practices for curbing SPAM users other than the normal CAPTCHA? I have someone who is creating dozens of accounts and sending PM's to every user and I am trying to find ways to help stop this.
CAPTCHA doesn't do the trick because whoever is doing it is either bypassing the system or is a human with plenty of time on their hands. Blocking IP addresses only works for so long as they stay on that IP (plus I can find no particular way that JomSocial actually tracks IP addresses except for wall posts, so finding the IP has been challenging) and waiting until hundreds of users have contacted me to report the spammer just reduces user trust in the site.
Is there a system that allows you to limit the ability to send PM's until a certain rank or activity? For example, you cannot send PM's until you have posted or commented on X threads?
I'm looking for any suggestions that would help me with this. Right now I have had to set the site to require admin approval to log in after registering, but that is only a stop-gap, it is not a practical way of running a site with thousands of users and dozens of new sign ups each day.
Thank you for any suggestions!