One thing to remember, the spammers can see the signup code. That’s what they build their scripts for.
The better you can customize your site, the better you can stop them.
Checking your referral logs is one way you can see how they’re getting in. Tip: login to the bbpress admin area and CLOSE SIGNUPS.