I now require a code on sign-ups, one that they have to request via email.
The good news is I haven’t gotten a single bogus sign-up since then.
The bad news is I haven’t gotten any non-bogus sign-ups since then, either, but that site is not being heavily promoted for signups and is open for non-member read-only access. It generally only gets a few sign-ups each year.