In Magento 2.1.10, I have successfully enabled captcha for customer registration form but I am still getting fake users registered on website.

This is the registration form: enter image description here

These are fake users in admin: enter image description here

I have tested the registration form and it seems to be working fine. Then from where these users are getting registered and how to prevent this?

  • When was the captcha enable, as the registrations seem to have done around 3 days back.
    – Gagan
    Commented Jul 16, 2018 at 7:15
  • It was enabled last week on 12th July. Commented Jul 16, 2018 at 7:21
  • you can see in access log where is the POST request made to /customer/account/createpost/
    – MagenX
    Commented Jul 16, 2018 at 7:24
  • @MagenX Where can I find this access log? there is no such file in var/log directory Commented Jul 17, 2018 at 5:01

1 Answer 1


I know what can help you to protect your website from spam. Cleantalk provides spam protection that is invisible for visitors without using captcha and other annoying methods. When installed on your website this service captures the behaviour parameters of a visitor or a spambot. These parameters are being assessed and the service makes a decision — to register the visitor or to define the form as spam and reject it. Based on such checks, the service forms its own list of email addresses used by spambots. By the way, the tool adds not only email addresses to the blacklist, but also IP addresses and domains of the websites that are promoted through spam mailout.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.