On our Magento 2 website, we have noticed that there are customer accounts with first names and last names consisting of random alphanumeric characters and are registering on almost daily basis.
The common thing about these accounts is that the Last logged In time is set to (Never login).
so far we have disabled/restricted REST API for customer registration. we also have added google Recaptcha to our registration form and we also have checked the admin activity log and non of the admins have created any customer.
But still, these customers keep registering.
Can someone suggest (if) there are any other ways to create a customer?