I assume the spam is coming from bots? (Does anyone spam manually nowadays? 
) The approach will differ depending.
An alternative to disabling sign-up altogether can be the must_approve_users site setting. But if the number of spam sign-ups is high, this might generate too much work for admins and moderators to realistically handle.
