diff --git a/packages/console/function/src/auth.ts b/packages/console/function/src/auth.ts
index 4d3ca659..835e8ffc 100644
--- a/packages/console/function/src/auth.ts
+++ b/packages/console/function/src/auth.ts
@@ -120,6 +120,10 @@ export default {
 
         if (!email) throw new Error("No email found")
 
+        if (Resource.App.stage !== "production" && !email.endsWith("@anoma.ly")) {
+          throw new Error("Invalid email")
+        }
+
         let accountID = await Account.fromEmail(email).then((x) => x?.id)
         if (!accountID) {
           console.log("creating account for", email)