They should sign a message with that adress to proof it's under their exclusive control.