I was thinking more of a "verified by stripe" type flow. They just need a location and a hash that prevents multiple signups. I realize that's just moving the problem, but hey the whole idea is impractical anyway.