. . . "it is the organisation's responsibility to verify the customer and validate their details for example identity, account details, customer address." .