My app keeps getting what looks like spam user accounts. Even when it is impossible to create an account at the Login screen, these accounts are still created somehow. The email address associated with the accounts is just gibberish (e.g. “aKwkPUjcav”) and shouldn’t pass the email validation criteria. The userstatus of these accounts is set to Guest.
How do I prevent these accounts from being created? Captcha doesn’t seem to do the trick.