It's quite common actually when it's human's registering for them to slip through (you may think, hey these are really good bots, but in actuality it's humans being paid pennies per submission); that's why the
Login Detection portion was created, which is not in the stock product.
I use "Suto with Message" for all of my SFS configurations.