I recommend requiring people to verify their email before sending email notifications to prevent abuse.