There already is an image verification challenge. The second idea might be something I go with (have the admin activate the account rather than the user).

I'm pretty sure these aren't bots but are actual humans.

Peace,
Drew
_________________
Power to the PowerPC!