You mean email account, and not address, right?

Prevention is less important than detection and reversal before withdrawal, which Square and other payment methods companies are pros at.