Return email validation sends a consumer a code, password, or link during checkout that they have to use before the order completes — confirming they actually control the email address on the order, not just typed one in.
How it works
- Collect and verify the email address at the start of checkout, and tell the customer to expect a confirmation message
- Place the order on hold and send the validation email
- The customer follows the link and enters the code or password to validate
- Once validated, release the order — this is especially useful for digital downloads
One rule matters more than any other here: if you can't reach the consumer at the email address they provided, don't send or allow them to download the goods.
Where it falls short
It won't catch genuine identity theft — a fraudster can create a throwaway email account in seconds and validate it just as easily as a real customer. It also slows checkout by 1–24 hours, which has a real cost against conversion.
Making it worth the friction
Track failed validation attempts, and run velocity checks correlating the email against shipping address, phone number, and card data — the value here isn't the validation itself, it's the pattern data it generates. It's inexpensive to implement using existing mail infrastructure; reverse phone/address checks or email authentication services are worth layering in alongside it.