verification loophole