Yea. But a secure system would allow that only if the new email can be veriried