You can't prevent spam like that. Rate limiting: based on what key? IP address? Botnets make it irrelevant.

Proof of work? Bots are infinitely patient and scale horizontally, your users do not. Doesn't work.

Micropayments: No such scheme exists.