Check vfy flag instead of just mfa