@darius another thing that works: Big organizations that might _need_ verification, like parties, should simply run their own server from their own domain. I know if an account is on social.bund.de that it is a legitimate german government account