Stop social engineering attacks with identity verification