How to lockdown new website signup if enduser types random subdomain?

Hi Team,

We setup WordPress MultiSite and WHMCS Provisioning module. However I noticed that if the enduser types up any subdomain they are greeted with a screen to signup for another WordPress site. This bypasses our WHMCS billing and provisioning process. How can I stop them from signing up another site?

Kind regards