For others, how we confirmed their identity was via mailing them from Wikimedia Commons.
Yes, Verification of the identity is absolutely necessary. How about also asking him to log in via his already registered wiki account and ascertain his identity too.