the one tap zap feature is going to get dangerous when scammers start trying to leverage it