Maybe block the IP, disable that feature of being able to post after they confirm their email........then enable it when u confirm it's not spam/scam, add the captcha, charge a small fee, look in the market for a mod that makes the new member who is joining......to figure something out before they become a member.