diff --git a/ghost/core/core/server/api/endpoints/session.js b/ghost/core/core/server/api/endpoints/session.js
index d9f1e519b6..8ae5e42770 100644
--- a/ghost/core/core/server/api/endpoints/session.js
+++ b/ghost/core/core/server/api/endpoints/session.js
@@ -31,7 +31,7 @@ const controller = {
         let skipVerification = false;
 
         return models.User.getByEmail(object.username).then((user) => {
-            if (!user.hasLoggedIn()) {
+            if (user && !user.hasLoggedIn()) {
                 skipVerification = true;
             }