Is this situation like crypto in the 90's where you just had to have an agreement stating you were a US citizen (or whatever), and a checkbox, then it was all ok, or do you have to actively verify they're a US citizen?