At some point if you want to be absolutely sure, you'll have to send a validation link / email and not doing it frontend in JavaScript ;)