Here's my suggestion. How about changing the account activation type from email to admins since you guys might able to see the user's IP and their location. (Well on mines the ISP location appears on my admin panel, you know the google earth thing. Not sure how this one works tho)
Hope it helps.