Yes, token source can be verified. I've processed requests like these before.
Some even ask for the private key of the contract creator address, these can all be provided.

Feel free to PM me your detailed needs.