I worked for a while at a service company that helped for a few of those issues specifically. It basically served as a back-search against an email address and known connections (social media), and online connections to give it an effective score if it should be manually verified or sidelines into a separate bucket than the general pool.

And even that isn't as icky as a short project I worked on for a major CC company. Still get the icks thinking about it, and I didn't continue beyond the 6mo contract.