why does top-up need to be verified?
verify_top_up