Yes, by default. When someone registers a brand-new account on your storefront, they're sent a verification email with a code and are kept on a Validate Your email screen — unable to use the site, including checkout — until they enter it (a Resend email verification code link is available if it doesn't arrive; each code expires after 5 minutes). This does not apply to:

• Staff/admin accounts you create yourself in Clients > Users — these save as already-validated.
• Customers you bulk-import via CSV — also saved as already-validated.
• Signups using an @sprwt.io email address — an internal check for Sprwt's own staff/testing accounts, not something you can add your customers to.

A business owner can turn the whole requirement off from Client Config > Business: Email > Disable Email Validation Security — set it to Yes and new signups skip verification entirely.