I have new user moderation on but then users (spammers ) can still keep signing up. My admin user gets 'user not found' until I reset the password. The spammers seem to be completely bypassing reCaptcha.
I suspect it's the custom theme I installed. I am at the point I can just wipe the site site and start from scratch.
Does this situation ring a bell with anyone?