KasaPost provisions the first mailbox only after domain ownership is confirmed. That keeps the platform safer and keeps customer domains under the right owner.