Spam by filling out bogus forms and appointments

Spam has reached a whole new level. We have had problems with people filling out our contact forms with bogus information thinking that it is a comment to a website (i.e. comment spam). So we added a captcha.

We're using appointments + on and someone just filled out a bogus appointment. This is bold by these spammers. To actually go through the process of making an appointment just to spam. I guess appointments + is not spam proof. This is a new low for these idiots.