risk verifications