Best way To block/stop Fraud/proxies/bots/etc?

Hey guys! I've been through hell the last month or so with spam traffic mixed with some fraud. This led me to thinking the business was actually growing at an exponential rate and led me to making stupid decisions off the perceived growth. To get more accurate info

• tightened up .htaccess
• Added more verification checks and rulesets
• IP-range banned countries that are no relevance to the site (ecommerce and only ships domestic USA).
• I installed ipqs.com due to a recommendation from a friend and it helped a lot in weeding out fraudsters/bad actors that would get through.

However, I'm wondering if theres anything else you guys would recommend. I'd say the problem is high 95+% gone now however, I know you have to adapt to always stay ahead when it comes to technology.

Thanks guys!