Fake User REgistration bot simply bypass captcha!

[milad]

Hi Everyone

I have a problem! a bot just ragister hundred of fake users on my magento 2.2.5 online store!

I already enabled captcha with case sensitive and 8 chars but they can bypassit!

So how can I stop them to register fake users?

Thanks a lot and have a lovely day

[Manthan Dave]

Hi @milad

Below is the way to prevent those fake registrations : 

1.  Blocking via IP : each account subscription use a different IP from Colombia to Vietnam...
2. Blocking via User agent : it can be faked... It works if you want to limit crawlers blots.
3. Use HoneyPot : may works, but if the bot already focused you, I think it surely knows which fields to post (see: https://magento.stackexchange.com/a/104261/50635)
4. Captcha (Magento or Google) : may works but some people said it was overpassed
5. Edit email template and Add the confirmation email : - Add the email confirmation : Store > Configuration > Customer Configuration > Require Emails Confirmation > Yes
6. Seems the fastest and the more effective way to prevent spambots, as they are using more than 25 characters.

Fore more details refer this link - https://magento.stackexchange.com/questions/233368/prevent-spam-account-registration

Hope it helps !

[Manish Mittal]

Hello @milad

To prevent fake registrations, just enable below shared invisible google captcha:

https://github.com/magento/magespecialist_ReCaptcha/

I had the same problem and installed this plugin and issue fixed.