Just enabled the Captcha for registration page to avoid bot on registration process, you can find the setting under configuration > Settings > General and miscellaneous settings > security tab
then change the Registration Method to Email Validation under configuration > Settings > Customer settings
You may delete the customer if you feel that is fake account anytime...
Last time, our customer website have bot auto register more than thousand fake accounts, after we enabled the Captcha then everything back to normal.