I am running Expresso Store on the following site: https://peopleplacestraining.org

Everything seems to be working well, except for one thing…we're getting several spambot user registrations a day from the member registration portion of the checkout form. They're not even going through the order process - they're somehow creating members through the backend.

I have Snaptcha enabled on our site, but because the form used by Expresso Store is not the kind of form Snaptcha seems to recognize, it doesn't work. I even tried adding two hidden fields and using PHP to render an error message and a blank page (instead of the order confirmation screen) if those two fields are populated, but I couldn't get it to render the page correctly (it was either totally blank or showed both the error message AND the order confirmation page).

Can someone please explain to me how I'm supposed to prevent Spambots from registering as members on my site using your product? Shouldn't this be a little more secure?