They can look at things like the path the mouse takes, or the distribution in delays of actions.

Probably many other things too. But it's an arms race.