Phishing

Good morning
my site is being phished.  I have set the number of times they can try to donate to 5.  I set the time they can 
fill out the form to 60 seconds.  I have re-capture.  It seems as though more than one person is phishing
due to the different IP addresses.  Any suggestions before I have to make people sign in?

Thanks.

Hi Richard,
You can enable Google reCaptcha at frontend of your site to avoid spam attack
Thanks
Dam