It's true, this is to protect users from fraud.