Hmm, still not sure I understand the process, but yeah, the motto around here seems to be…don’t trust, verify
My understanding is that the npub is verified by the client (i.e. nostr:npub18m76awca3y37hkvuneavuw6pjj4525fw90necxmadrvjg0sdy6qsngq955 or nostr:npub12vkcxr0luzwp8e673v29eqjhrr7p9vqq8asav85swaepclllj09sylpugg). I am weary of being informed that I am boosting the signal of scammers. This is my journey of education into an npub verification. Join me!
nostr:note1c8tkux22fkwqk2gh7tjdmv3yg2t6dgvjlwq2twduzg4yucdgr03st5geum
Discussion
See the magenta, purple check? The process for achieving it? I am also unsure of that. 
This works because clients will query to see if `user@domain` exists in a specific location: "example.com/.well-known/nostr.json?name=
Further information on setting this up via various clients can be found here: https://help.nostrplebs.com/hc/nostrplebs/articles/1671910544-setting-up-nip_05