The answer is to set your list
 
*Subscription= Open,Confirm
 
That will block the bogus subscriptions while making it possible for
legitimate users to subscribe via the "cookie" (OK) method.
 
Nathan