basically no verification

That's what the law is. See item 12 here: https://www.ftc.gov/tips-advice/business-center/guidance/com...