its kind of a pain for the users, but the best solution might be to have them re-verify their email addresses on maybe a 6 month term. its how my 401k account

its kind of a pain for the users, but the best solution might be to have them re-verify their email addresses on maybe a 6 month term. its how my 401k account works, since your email address might change at any given time along with your job.