To start, I’d just like to say that any bot might be illegal for a game, but not all bots are bad. It depends on how they are used (think free buffs and heals for every one). Unfortunately, they are, nearly 100% of the time, used for personal/group gains - rarely to improve and help other players’ progress on the game.
"Security" Check
This might be a stupid suggestion but what if instead of captchas, we use something else that involves pressing specific control buttons.
How it could work
At random intervals (1-3 hours), a small, semi-transparent notification would slide from the side telling the player that a quick security check sorta would commence in 60 seconds (with a countdown, but player has option to either close it just to remove it from view, take the check now OR to remind him again ONCE in 10 minutes). This will make the player expect and have enough time to prepare for the check.
When the countdown ends, the player has a 3 second invulnerability/invisibility/untargettable buff to do the check. The last control key/button he’s been using/pressing will also be muted during that window and will not be included in the check (to prevent him from getting consecutive failed tries NOR automatically pass the check). Once the check is up, it will ask the player to press a random control button/key (doesn’t trigger the assigned skills/functions in-game, does not include movement keys and jump key so player can still move around) to remove the prompt. The player has 3 tries. After the failed 3rd try, he’s logged out of the game and will have to wait for a specific amount of time (1 hour?) before he can log in again.
Exceptions
The check will not appear if player is:
-
Vending;
-
In towns;
-
In PVP situations;
-
In quest/field boss fights;
-
AFK-ing but doing nothing outside of towns.
Advantages
-
Bots can guess, but with the number of keys available (can even use 2-key/button combos) and the limited number of tries, they’ll have to be smarter.
-
It’s less intrusive than captchas. Players are alerted well without affecting gameplay, and have the option to delay the check in case they’re doing something really critical (e.g. on very low hp).
-
It’s joypad-friendly. Captchas may require alphanumeric inputs so players on game controllers will have to reach out for the keyboard just to get around the check. Simply pressing the correct button/key is easier on either keyboard or game controller.
-
Consider it a bonus, possibly life-saving, buff. If you’re lucky (the check appears at the right time), you can use it to save yourself from a last-hit demise.
I thought this might work. I’ve nowhere versed with game security, but maybe this will give them ideas (hopefully).
(Most) bots will kill a game
I come from RO and have experienced using bots (I won’t be a hypocrite and say I haven’t) AND know how annoying they are when they’re used by other players against you.
It was not a matter of being able to abuse the system or have advantage over other players, but rather the idea that “if you can’t beat them, might as well join them”.
It was still fun, in a way, but not 100% fun (if there were no bots at all). I doubt there was ever an MMO where the creators thought “hey, let’s create a game botters can enjoy”.

?