I have the same problem too, and I already had the “anyone can register” button unchecked since a long long time ago. I’ve upgraded to 2.7.1 a few weeks back, hoping that it might fix it, but I’m still getting these fake new user registration email notifications. It’s as the parent post said, the spam users aren’t even exist in the database.
