Check the proof. Release the claim.

Private requests are returned only after operator authentication. A code alone is never proof of account ownership.