A simple captcha with distorted characters + some hidden form fields would stop every single "opportunistic" bot.

There's hardly anything you can do to stop someone determined enough to spend money to spam your specific website. These kinds of captchas do raise the bar somewhat, but every single one of them is ultimately bypassed by paying people to solve them for you.