As it seems most SPAM messages contain a link somewhere in them, I suggest simply removing the ability to include links that are not on the authorize.net domain.
Either that, or force the registrations to be tied to a valid authorize.net account instead of just a forum account.
