Comment by wizzwizz4

Email is the digital equivalent of a postcard. I really want to argue that this is a bad idea (because it is), but depending how you set your email system up, it might actually compare favourably to using a third-party identity verification company.

Better to use some kind of secure drop web portal (perhaps https://securedrop.org/) that's actually designed for that kind of thing, though.