is there a reason why top-up needs verifying?
verify_top_up