Accept the address and key the user based on the part preceding +.

That can be prevented with simple validation on sign up.