I already have MFA. Looks like you didn't get my question. How are we going to prevent anyone from using your email id in a signup form for some service? Spammers/abuser don't have access to my email account they just use my email id. What seems to be happening is some spammers creating fake accounts for services using randomName@myappsdomain.