They should prohibit p2p merchants from requiring IDs and selfies with the ID