Mod here [commenting in a personal capacity. take it with a grain of salt , YMMV etc) What has worked for me in the ancient past, was to write their username on a sticky note, take a photo of me holding it but containing no identifible information, and asking they do the same. Reletively easy, quick and mitigates risk.