Comment by jiiam

EDIT: I just want to clarify that I don't believe the claim that an employee can intercept the validation code