Making Email Verification Required for Using Our Services

[Looper]

I want users to verify their email addresses in order to use my services. Currently, email verification is not mandatory during sign-up, but I aim to make it a required step. How can I implement this change?

[Evolve Web Hosting]

@Looper WHMCS has this built in. https://docs.whmcs.com/Client_Email_Verification

If that's not enough, I'd suggest using this: https://securityplus.griffinhosting.com/

I've been using it for years and the product and support are great.

[Looper]

I want user access restricted solely to the client area.

[kon]

We came across this issue in the past but when we saw that it wasn't possible directly through the settings, we abandoned it. It would be extremely useful for us to force everyone to verify their email address. Roughly only 20% of clients actually verify it, now that they are not forced to do it.

Would also like to know how this can be achieved.

[Looper]

6 minutes ago, kon said:

We came across this issue in the past but when we saw that it wasn't possible directly through the settings, we abandoned it. It would be extremely useful for us to force everyone to verify their email address. Roughly only 20% of clients actually verify it, now that they are not forced to do it.

Would also like to know how this can be achieved.

I only found a paid equivalent here: https://marketplace.whmcs.com/product/1186-email-verification-pro.

[kon]

Thanks for posting it.

Looks good, but not perfect.

Quote

If the customer doesn't verify, they CAN NOT access any part of their account (except Support Tickets and client detail) until they have verified their email address.

Ideally we are searching for a way to completely block the access to the account until the email is verified. Accessing the "client details" means that anyone will be able to access the client area, which is something we don't want to happen until there is a verification.

 

[Looper]

1 minute ago, kon said:

Ideally we are searching for a way to completely block the access to the account until the email is verified. Accessing the "client details" means that anyone will be able to access the client area, which is something we don't want to happen until there is a verification.

 

That's what this addon does.

[zetaone]

Hi all,

While WHMCS does offer a built-in Client Email Verification (/Client_Email_Verification) feature, its current scope is limited to users who complete registration or place an order. 

This implementation creates a significant security and operational gap: users who create an account without ordering a product or service can still interact with support systems, without ever verifying their email address.

From both a technical and security perspective, this is a limitation I believe the WHMCS development team should seriously consider addressing.

Ideally, email verification should be a mandatory prerequisite for accessing client communication tools, especially support ticket submissions, even for pre-sales or general inquiries. 

In other words, unless a user has verified their email address, they should be restricted from:

• Submitting support tickets (including those routed to non-client departments)
• Accessing the client area
• Participating in any communication channel

While it's possible to patch this gap using custom hooks or third-party APIs like:

• ZeroBounce API – to validate and score email addresses in real-time
• NeverBounce API – to ensure the address is active before allowing interactions
• SendGrid or Mailgun Webhooks – to trigger actions based on verification status

…this type of foundational logic really should be integrated into WHMCS core.

I genuinely hope the WHMCS team will consider implementing an official setting or supported workaround in a future release, allowing businesses to enforce full email verification before any meaningful system interaction.

 

[wsa]

On 12/8/2023 at 6:26 AM, Looper said:

That's what this addon does.

You can choose the Checkout Option; they cannot do anything until they verify their email