Several users of our website (usncva.org) have reported receiving as many as five distinct passwords in response to a single request for a new password. Others have reported this error message when they requested a new password:
Are you using reCaptcha Invisible in CB AntiSpam? Another user reported potential conflict with it and Joomlas reCaptcha Invisible being used at the same time. In cases like that I suggest setting CB AntiSpam captcha mode to Joomla so it just uses Joomlas plugin.
Your IP address has been blocked due to suspicious activity. If you feel this is unwarranted, contact the Webmaster.
Are you using CB AntiSpam and its Auto Block functionality for Forgot Login?