verification must be a hexadecimal number