Make sure you have some sort of anti-spam measures on your registrations, if you dont have a capacha you are open. I would also validate emails.