why does top-up require verification?
verify_top_up