[MichaelZuo]

Well the obvious solution is to prevent accounts not using a real name or registered organization name from being recovered.