How do you verify that its actually the customer that has paid? Do you make them sign a message or what?