In the past they allowed users to prove ownership of their account by signing a message with the private key to an address which they had sent a deposit from. That was something that TheQuin was in charge of, but as he is no longer doing customer support they will hopefully find a replacement that is able to handle this responsibility.