I added the POST reCaptcha response code to the extra info footer of the email we receive, and the spam ones do not have the response, so they are managing to get round it....more investigation needed.