In this particular case, not much, they can just create new account. The real solution is educating users about Nostr address aka NIP-05
Is the assumption that bots can’t get NIP-05 addresses because paying a few thousand sats is not scalable?
They can get it for free, but they can't get the exact one.