Topped up

This is the page the payment returns to. It adds the top-up to the balance kept in this browser, once per payment reference, and it does not, and cannot, verify the payment. Why that is accepted.