or just make a verified email address part of the required sign-up flow. No click on registration link, no further access to account.