I have a fairly rare surname, but have {surname} at gmail, so I get a lot of "spam" from companies that sign me up before verifying if the user inputting my email is the person owning the email.

In the most egregious/spammy cases I'm gonna find some higher-up emails and sign them up for their own services in hopes that the practice will stop.

TL;DR: email confirmation or get egged.