The only way to do that is by sending an e-mail and having the user click a link to validate the address is real, and theirs.
Since this a very common thing to do, there a some good articles about it. This was the top hit for me on Google:
http://ctrlf5.net/?p=55[
^]
Hope this helps :-)