How to (not) prove your friends are bots