Fake Users

  • Resolved teepeenomad

    (@teepeenomad)


    4 years, 1 month ago

    Fake users question…

    Hi, my site has a very small forum that’s been running for the last 5 months.
    Since setting it up I’ve had perhaps 5 fake accounts try and register but never get past the email validation stage so I could easily delete them.

    Today I found around 20 new users, all Approved, all passed email validation with the names a variation of [email protected].

    I always receive an email when a new user has made an account – even if they haven’t passed verification, but got nothing for these fake accounts.

    I just tried making a test user and received an email and it has been placed in email validation check. So how did this happen with the 20 fake users?

    I have ‘Anyone can register’ disabled and am using Google ReCaptcha UM addon.

    Thank you

Viewing 6 replies - 1 through 6 (of 6 total)
  • Plugin Support Ultimate Member Support

    (@ultimatemembersupport)

    Hi @teepeenomad,

    Do you have a registration link on the /wp-admin page?
    Please go to your dashboard -> Settings -> General and make sure “Membership-Anyone can register” is unchecked.

    Do you have any other memebrship plugin installed?

    Regards.

    Thread Starter teepeenomad

    (@teepeenomad)

    Hi and thanks for your response.
    The wp-admin page is redirected to another URL which offers no option to register and it has always been like that.
    I have now unchecked that setting under General.
    No other membership plugin – only UM and WPForo.

    I have had a forum for five months and always used WordFence. 18 days ago I changed from WordFence to iThemes and then this happened 3 days ago. I wonder if it is linked?

    But what I’m most confused about is that I always receive emails when new users try to make accounts. I registered a test dummy account today and immediately received an email to my administrator mail saying someone new has created an account – but with these fake 20 accounts I didn’t receive any notification?

    Thanks for your help

    Thread Starter teepeenomad

    (@teepeenomad)

    How did these fake accounts register on my site without me receiving an email notification that there are new users?
    And why was their membership automatically approved?

    make sure “Membership-Anyone can register” is unchecked.??

    How does this work then?

    How does it decide who can register?

    Thread Starter teepeenomad

    (@teepeenomad)

    Hi Ultimate Member Support – it’d be great to get a reply and some support? Thanks

    Plugin Contributor Champ Camba

    (@champsupertramp)

    Hi @teepeenomad

    Sorry for the late response.

    Could you please tell us if you have enabled any firewall or security plugins to mitigate the issue? Do you have ReCaptcha enabled on your site?

    Please feel free to re-open this thread by changing the topic role to “Not Resolved” so we can get back to you.

    Regards,

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘Fake Users’ is closed to new replies.