You got it backwards. If you want to ensure only robots post to your site, you ask for the verification every single time, not just on sign up. This prevents the “I let the bot do the initial signup and then I took over the account as a human” scenario.