diff --git a/src/Security/Member.php b/src/Security/Member.php
index c6ec8d763c9..c89c5091963 100644
--- a/src/Security/Member.php
+++ b/src/Security/Member.php
@@ -775,6 +775,7 @@ public function onBeforeWrite()
             && $this->isChanged('Password')
             && $this->record['Password']
             && $this->Email
+            && filter_var($this->Email, FILTER_VALIDATE_EMAIL)
             && static::config()->get('notify_password_change')
             && $this->isInDB()
         ) {