1

I have a lot of spam customers registered even I have already enabled Captcha validation on Customer creation form, but I wonder why there are still many fake / junk customers registered everyday. Does this mean that some bot can actually figure out passing through the Captcha validation? and how do we prevent this?

enter image description here

enter image description here

Improve this question
5
  • 2
    Try to change Magento's native captcha with Google reCaptcha.
    – Mohit Kumar Arora
    Feb 14, 2022 at 12:26
  • Are you using SSL for your website?
    – Mohit Kumar Arora
    Feb 14, 2022 at 12:26
  • 1
    @MohitKumarArora I'm using SSL. I have just enabled Goolge reCaptcha, and disabled Magentos native captcha, and see how it goes. I'll give you update tomorrow. thanks for far :)
    – Magento Learner
    Feb 14, 2022 at 12:40
  • @MohitKumarArora I haven't got any spam customers today. I think it helps with change Magentos native captcha to Google reCaptcha. thanks
    – Magento Learner
    Feb 15, 2022 at 9:13
  • Great, can I post my answer. Can you please up-vote if it helped ;)
    – Mohit Kumar Arora
    Feb 15, 2022 at 9:54

1 Answer 1

Reset to default
2

Try to change Magento's Native Captcha with Google ReCaptcha. It is much secure and intelligent than Magento's native captcha.

Verify that you are using valid SSL certificate for the website.

Check and change the following something which is not easy to guess:

  • Password of all admin users for Magento admin panel
  • MySQL/MariaDB password, which you are using in app/etc/env.php
  • FTP/SSH credentials

Verify, that there is no custom PHP file residing in the document root or pub folders. If there is any, then validate the code it has.

This is because, customers/admin users can be added directly from the database or using a custom PHP code also.

Improve this answer
2
  • 1
    change Magento's Native Captcha with Google ReCaptcha solved my problem.
    – Magento Learner
    Feb 15, 2022 at 10:29
  • Setup Google ReCaptcha, but still getting spam registration. Can fix issue if change all passwords?
    – Dhaduk Mitesh
    Dec 23, 2022 at 5:31

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.