... prevent claimed users (which/who are in fact bots)...
In the above sentence, what's the most appropriate choice to refer to the users that are in fact bots? I think, which
is correct one, however I'm afraid of grammatical mismatch. Of course, using that
can solve the problem, by the way.