Hi @danniee
Please note: user registration and account creation is a part of WordPress core. wpForo only provides a registration form. You can install and configure any WordPress antispam plugin to protect spam user registration. This is not wpForo part, this is WordPress part. And all WordPress websites are under hard spam attacks all WordPress websites get hundreds of spam registration per day. You should use proper solutions against spam.
wpForo can also help to protect against spam user registration with built-in reCAPTCHA. You should configure and enable reCAPTCHA for all registration forms in Dashboard > Forums > Tools > Antispam Tab. You should disable other reCAPTCHA plugins and use wpForo built-in reCAPTCHA.
Also, wpForo is well integrated with Akismet. You should install and activate Akismet too. There is also a free plan.
If you install other plugins for registration protection I recommend do a deep test and make sure those plugins don’t stop forum registration process.