Yes, you can set your forum so that you must activate accounts.
In the admin panel, under General Admin: Configuration. There will be an option:

Enable account activation None User Admin

Check the Admin box. If a spammer does turn up, get there IP address and ban it, that is always useful