Tested here, at the official xenForo community, just some minutes ago. Reproduce: Create a dummy account for this test purpose. Verify the e-mail. Change user's e-mail to an invalid one (but do not verify). Change your password to something you will not remember. Try to login. You don't remember the password, so what? You can use the Forgot your password? page. No? No! If you do, the confirmation will be sent to the invalid email address. You just banned yourself !