If you are accepting a Record from a non-verified account, Codex recommends you perform due diligence to assure you know the identity of the sender.