This happens to me frequently, I have an OG gmail account which a bunch of people have associated with their own accounts. The problem is the provider will verify a phone number, and once that's validated, will accept an email address, even if it's wrong. Two financial entities have accepted my email address tied to other people's account: Chime, and Venmo. There's no way to fix this since they all presume I am a customer of theirs, so the path to fix is to do it in their app. It is incredibly frustrating, more so when it's people who handles money do it. They should know better! The "We are not a bank (therefore not covered by banking regulations)" does so much work to cover their shoddy practices.

Same story with Gmail here, and unfortunately over the years it has simply become my primary. I'm still undecided on how I want to handle my own domain+email.

Someone opened a Venmo account using my gmail and immediately started moving thousands of dollars in small transactions, and my only options were to a) take ownership of the thousands of dollars of small transactions that were now associated with my unverified email or b) get my email banned???? Eventually I got an email saying the Venmo was disabled due to suspicious activity, hope that doesn't bite me in the ass in the future.

What if I wanted to sign up for Venmo in the future? Why do I need to create another email address to use their product in the future when they didn't even verify it in the first place? How are they allowed to run their billon dollar business like this?