Then, of course, one must verify that the verification code is valid, or the purpose of verification is more or less moot.