I agree, here’s a fix
As for the user (we call them “staged users”), that’s standard procedure for all incoming emails.
staged users