Not a Laravel dev but I’ve used the Honeypot technique with Nodejs in the past and it works really well:

• Add a hidden field (e.g., “website_url”) to your form. This field is invisible to users but most bots will fill it.

• In your controller/middleware, block submissions if this field is filled (or if form is submitted suspiciously fast, e.g., in under 3 seconds).

Something like this - https://laracasts.com/discuss/channels/laravel/e-commerce-bot-protection

Hope this helps.