Check Access Rules Says an Access Deny Rule is Working, but it is Not

Thank you for helping me in advance. Last night I created a rule to Deny the Username %carpintey%, because we have a spammer that creates dozens of accounts with the prefix carpintey.

Today I checked our users, and one named carpinteyroeal had been created, regardless of the access rule. Discouraged, I tested the rule with this exact username, and the rules stated that this username was not allowed. This confused me, because someone had indeed created this account.

I did change the rule to carpintey%, taking off the initial %, and still on a test it said this username was not allowed.

Can anyone tell me what I did wrong?