Automatically delete new accounts that have not verified their email within 24h.
Automatically delete verified accounts that have not made a purchase in the first month.
Automatically delete accounts that have not generated a "lead" in the first year.
Replace "lead" with whatever makes sense for your system.
Also maybe put Cloudflare WAF on your signup flow and set it to a high security level.