"Do they enter random text or put in URLs where they shouldn't?"
A (somewhat) common thing to do is have a form field hidden with CSS. Spam bots rarely, if ever, parse CSS
Or, you have a form field labeled "Leave this field blank." Spam bots will usually fill in all available fields so, again, if it's got a value you just ignore it.