I have a lot of spam customers registered even I have already enabled Captcha validation on Customer creation form, but I wonder why there are still many fake / junk customers registered everyday. Does this mean that some bot can actually figure out passing through the Captcha validation? and how do we prevent this?

enter image description here

enter image description here

  • 2
    Try to change Magento's native captcha with Google reCaptcha. Commented Feb 14, 2022 at 12:26
  • Are you using SSL for your website? Commented Feb 14, 2022 at 12:26
  • 1
    @MohitKumarArora I'm using SSL. I have just enabled Goolge reCaptcha, and disabled Magentos native captcha, and see how it goes. I'll give you update tomorrow. thanks for far :) Commented Feb 14, 2022 at 12:40
  • @MohitKumarArora I haven't got any spam customers today. I think it helps with change Magentos native captcha to Google reCaptcha. thanks Commented Feb 15, 2022 at 9:13
  • Great, can I post my answer. Can you please up-vote if it helped ;) Commented Feb 15, 2022 at 9:54

1 Answer 1


Try to change Magento's Native Captcha with Google ReCaptcha. It is much secure and intelligent than Magento's native captcha.

Verify that you are using valid SSL certificate for the website.

Check and change the following something which is not easy to guess:

  • Password of all admin users for Magento admin panel
  • MySQL/MariaDB password, which you are using in app/etc/env.php
  • FTP/SSH credentials

Verify, that there is no custom PHP file residing in the document root or pub folders. If there is any, then validate the code it has.

This is because, customers/admin users can be added directly from the database or using a custom PHP code also.

  • 1
    change Magento's Native Captcha with Google ReCaptcha solved my problem. Commented Feb 15, 2022 at 10:29
  • Setup Google ReCaptcha, but still getting spam registration. Can fix issue if change all passwords? Commented Dec 23, 2022 at 5:31

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.