It works when done right. a) verification code that is big enough under the scratchpad b) verification process on the vendor site shows how many times this code had been checked before.