Is the text they send always similar? Then the flag option of watched words could help. I think that one also works on messages.
There is also the Approve unless staged site setting, but I don’t remember if that works on PMs.
But I don’t think any of them are as effective and restrict regular users as little as AI.