JacobBall

Actually, there's more than one type of reCaptcha Site Key. I too was getting an error, which I tracked down to trying to use v2 site type keys, when you need to create a NEW Invisible Site Type key and enter that into the admin settings. That may help fix your issues.

For some reason, my posts aren't being approved - surely I can contribute to the conversation?? FYI - I turned Maintenance mode off, and had spam orders come through literally a minute later.

I upgraded to the very latest version 7.5.1 and it made no difference. As I mentioned earlier, I also used a clean full install, so it's not legacy files causing the problem. I also enabled email verification, along with Google Recaptcha v2, and that made no difference either. All the email verification does is trigger a bunch of non-deliverable emails. It would be nice to be able to delete more than one client at a time. Hopefully we get a response from someone at WHMCS that can help resolve the issue.

Turning off domain registration options is hardly a solution for most people, even if it does work for you. Nor does it explain why it's only within the last few days that this issue has occurred.

Kaybee, I doubt that it's a dodgy file within your file system, as I did a completely new setup with the full version, and I've still been experiencing the issue. Clearly, there's a loophole within the WHMCS software somewhere that's been found within the past few days, as there are so many of us experiencing it. I've got Google Recaptcha set up, banned IPs etc, and nothing's stopping them. The team at WHMCS need to take a deeper look at what the issue could be, as a priority.

First time poster, and I'm getting very frustrated with these spam signups as well. I've received dozens of them over the past day or two, and I've had enough. At least I can see I'm not the only one suffering this problem. John, that troubleshooting article doesn't help at all. They keep changing IP addresses and email addresses, so banning them in WHMCS or even the firewall on the server doesn't work. The IPs show as coming from Taiwan and China. I've enabled Google's reCaptcha V2, that hasn't stopped them. I've currently got my site in Maintenance mode, which seems to have put the brakes on for now - hardly an ideal solution though, is it.