Carding attempts need to be prevented with a reCAPTCHA or similar from the GiveWP side.
Third party spam tools like Zero Spam do not support the donation block plugin currently, so this is on us to fix.