To slow down credit card testers, offer option to require captcha in order to make a contribution. This requires both the Firewall extension and the (core) recaptcha extension to be enabled and it requires all contribution pages to have profiles with recaptcha turned on.