I’m assuming you’re using native WP users, but I wanted to leave this here in case anyone else comes across this.
With the Memberstack WordPress Plugin, you can easily create an email verification step, and block the users from seeing certain things (pages, elements, you name it) until they have verified their email.