How can we check that self-registered users are real people?

Details of self-registration accounts should only be given to members of your organisation whose identity has been verified by the organisation (e.g. for example at university admission of new students). When users register themselves, their details are emailed to their administrator, who can crosscheck them against other records.