They should have a verification process for accounts beyond verifying an email address. Verify identity, it's way too easy for people to be impersonated, there's a whole TV show dedicated to this...