UPDATE: remote activity didn't check verify