So if a user pays through the bot, he has to verify in some way.