Verification is done by putting thumb in the machine, then using the excuse of the server, the 'ration' is stolen