When a customer signs up, you send a simple email which has a validation link. The customer follows the link, enters some info only they would know and everything is set up.