I know you're not bluesky, but this is much less straightforward than the "I send you an email, and you click the verification link" pattern.