diff --git a/src/main/java/com/sqx/modules/app/controller/app/AppController.java b/src/main/java/com/sqx/modules/app/controller/app/AppController.java
index db0d23d4..7db7d2c7 100644
--- a/src/main/java/com/sqx/modules/app/controller/app/AppController.java
+++ b/src/main/java/com/sqx/modules/app/controller/app/AppController.java
@@ -167,6 +167,12 @@ public class AppController {
                              @RequestParam String accountNo,
                              @RequestParam String mobile
     ) {
+        // 判断身份证号是否有空格
+        if (certNum.contains("  ")) {
+            userService.addBlackUser(userId, "恶意实名");
+            log.warn("恶意实名认证: {}", userId);
+            return Result.success();
+        }
         certNum = certNum.trim();
         if (StrUtil.isAllBlank(certName, certNum, accountNo, mobile)) {
             return Result.error("真实姓名、身份证号码、银行卡号、银行预留手机号缺一不可");