What’s the harm? Depending on your functionality there is hardly any downside to allowing multiple ghost accounts.
This usually stops simple spam bots that are aimed at that particular off-the-shelf forum software.
Manually approve someone who registers ... then discover they're a spam bot?
I recently had an incident with Chime Bank like this, where someone enrolled every public email address at my company with them. I sent them an abuse report and they told us to block their domains. Real great solution, guys.