Maybe switch to google recaptcha v3 ? I see lot of bots bypassing the current one, which is again weird unless they do it manually (yes they pay ppl do that too)