OK, now I get it. All you're going to be able to confirm is that the address works (an ESIGN/e-Regs requirement.) At best, emailbox holders have only a contractual right to use the address. I doubt AOL and other major providers will confirm identities and other private information about their customers. You'll need to do CIP and anti-fraud investigations some other way.