All email opt-ins are validated via a double opt-in email we send to the email address users enter. This ensures that users are not entering fake email addresses. Users do not receive credit for opting-in until they pass the double opt-in validation check.
For more details on how users and entries are authenticated and validated, see this help article.