Fake email on Lost password ojs3

in OJS 2 had not email validation turned on. After upgrading to OJS 3.1 I activated that option.
Actually, I have lots fake users.
Lost password page send lots of email from fake user
How can I verify the validity of the email when resetting the password? and show message that email invalid

Hello @Ala_a_hamda ,

Please note, that the version of OJS that you’re using is no longer supported by PKP. I recommend that you upgrade to the newest version of OJS, as it is possible that your issue will be resolved by upgrading. However, other community members may wish to offer assistance.

Upgrading instructions are available in the PKP Administrator’s Guide and as part of our [Upgrade Guide] (https://docs.pkp.sfu.ca/dev/upgrade-guide/).

Information about the latest version of OJS can be found on the PKP Website

PKP Team