Email Verification & Anti-Fraud stops the orders that cost a hosting company the most: accounts opened with an address nobody reads, used for one abusive service and a chargeback. A client has to prove the address is theirs before anything is provisioned.

A code, not a link nobody clicks

The moment an account is created the client is emailed a short numeric code. Until they enter it you choose how far they get: nowhere in the client area, or anywhere except checkout. Change the email address later and it has to be confirmed again.

Nothing is provisioned for an unverified client

With Hold provisioning on, a paid order from an unverified client waits in Pending instead of creating a server.

Screening at sign-up

Refuse throwaway mail providers (a built-in list plus your own domains), refuse “+” aliases, accept only the domains you list for closed sign-up, and cap the number of accounts created from one IP address in a day.

Optional code at every sign-in

Email a code at each sign-in as a second step. Clients can tick don't ask on this device to skip it for the number of days you allow.

Kind to the customers you already have

Clients who exist when you activate the addon count as verified. Accounts an admin creates are verified, and admins using Login as Client are never asked for a code.