Spam is a large issue that is never solve using one solution. I too use Wordfence on my WordPress site but that isn’t a major spam protector. There are other systems such as DNSBLs that are more effective.

1. Try the no installation required method which is pasting a file that contains a lot of keywords that are used by WordPress spammers. Here is the link to the Github repo.
2. Try installing and setting up Stop Spammers Spam Prevention which uses several several methods of finding and locking out spammers. Make sure to configure all of the settings as it can break things such as web hooks from 3rd parties.
3. Try configuring in the Stop Spammers Spam Prevention DNSBL section with a Stop Forum Spam API key, a Project Honeypot API key, and a BotScout API key.
4. If all the above don’t resolve the issues, start banning IP ranges and/or countries. This method should be avoided to enable everyone to see your site and to promote an open web.

Again, if you could stop all spam, you’d have a billion dollars in your pockets.