If you don't follow the terms you mentioned in OP (take a picture...) then yes they can try and say they deposited into wrong account in which case bank might revert the transfer. So take any and all precautions necessary.
Thanks for your response! Will it be enough to ask to take a picture? I saw couple times that people also asks to rip receipt into pieces and then send a picture.
Ask them for a picture along with their username written on a paper so you know that it's him and not just some random pic taken from the internet

But if you want to be secure then there's nothing wrong with asking more just to make sure

I think you should ask for his pic and his I.D just to make sure
Better be safe than sorry, am i right
