CAPTCHA is should be a feature that is able to be enabled within NXT donation forms.
We recently had an attempted charge. It was recommended that we enable CAPTCHA to help with this. Unfortunately, it is not available in NXT forms. This seems like a really great security measure to add.