My company sells products through calls. During the calls a customers PII is collected and used to create the product. This PII includes email. After the product is created, we email the customer a summary of the product and all the details they provided us. However, because the email is not verified, there is the potential risk of the email being incorrect and the customer's product summary (including PII) being sent to the wrong individual, who could use it for nefarious reasons.
How is email verification done when the customer is on the phone for both email or mobile number? In addition, the details provided are used to create the customer's digital identity for them to access our online portal. Again, because the email is not verified, we could be creating a digital identity for the wrong individual (i.e. not the customer but the owner of the incorrect email). What is the best way to resolve this?