One problem, what's to stop a phiser creating a message and using your tag?