Can you explain why this is an overkill ? The first thing that I built for my webapp was the email verification step, because it helps ensure that I don’t have any fake ids, etc. and helps with tracking. So, I am curios to know why you felt that it was an overkill. Perhaps, you meant, when someone is filing expenses, they are probably real people and so, for your specific application domain, it is an overkill ?