One way would be to check against your company's Active Directory to verify that the alias matches the username. You could use the Active Directory web service to do this. We have some examples of auto-completion that check AD first before allowing e-mail submit.
Patrick Halstead
Project Manager at Qdabra