One option I've seen work for a similar requirement is email verification on any corporate address. All you want to know is that they're legitimately connected

One option I've seen work for a similar requirement is email verification on any corporate address. All you want to know is that they're legitimately connected to a legitimate prospective customer, just make them answer an e-mail on the company's domain.