Remove the Edit profile permission for the Registered user group and set up a promotion after x posts to add members to a user group which allows that permission.
However, we find leaving that allowed enables us to quickly and easily locate the spammers and spam clean them.