In a normal business that is not a mega corporation you would just do it. You can just activate it for a limited period if you really feel suspicious, after two or three tries you will quickly spot the people trying to abuse the system.
Even if people could abuse the system for free aubsceiptions, I don’t agree with the fact that preventing people from getting free subscription is a higher priority than helping a mother getting her 2 years old back.