If a customer send a email to helpdesk, the system open a ticket and record the customer en the DB. I did not verify the customer, I want only verify specific clients.

All working fine up here.

The problem is, if this unverified customer goes to the portal and uses the option "forgot your password?" ... the system sent the email and the customer can set a password and get access to the portal, the system change this customer to status verify. I don´t wanna this.

It is a problem or is normal? How I can avoid it?

Regards