end-user verification