I have the same problem with one of my forum. For now, in addition to email activation, I also put that admin has to validate new user registrations, since they usually use obvious spam emails, I guess I can delete the users before they post the spam. But, it’s just a temporary solution for now…