Well, there is one thing people usually overlook when "spam" is concerned... And that's that companies hire people to spam in most cases; so a human is capable of defeating a signup and posting whatever they have to.
In this method, it doesn't matter what your security precaution is, a human can still break through a captcha, as that's what it's meant for.