Button asks for one confirmation that the rules were read. Emoji match shows five emoji and asks for one of them by name, which stops the simplest click bots. Image code shows six distorted characters to type; because a picture is a barrier for people too, every image card also offers the button check to anyone who cannot read it.
Example
Emoji match with three tries and a 10 minute cooldown is a good default.