I am sure all popular services have users who try using emails of others (ex: celebrities) to register. This can be done as a joke or as a coordinated attack.<p>Obviously, those who get unexpected notifications add them to their spam directories. This affects domain reputation and the brand.<p>What are the best practices?
Rate limits? CAPTCHAs? Anything else?