enforce card verification