Update from the previous post here: https://www.indiehackers.com/post/dc2d99d8a8?commentId=-LfiKLP7qGjo25rdb_cp
I've figured it out, qq.com isn't the issue. The spammer was using qq.com emails sure, but these most definitely were not their own.
The spammer was using Survais to promote themselves in Chinese, using the name field.
I only realised after all the new accounts had the same name associated with the account.
They were using the Name field in the sign up form, which is used in the verifying email, which is sent automatically in the email.
This way, the promotional name is sent in the email and thus they are creating hundreds of spam accounts, which were sending emails promoting their spam name.
It seemed like they were doing it manually too as it was roughly 1 sign-up every minute or so, but not exactly to the minute.
Quite a clever way of spamming, through an existing service.
Thought I'd share in case anyone else here has a similar issue.
Solution was to block the IP creating the spam accounts, and remove the user's name from the verification email.