> Sending someone an email and telling them to confirm that they received it (e.g., by making the next step be triggered from a link in the email) is the only way to validate that an email address actually works.

This is the gold standard but note it is itself prone to false negatives and can even have false positives.