Sessions are encrypted end to end. Failed verifications are recorded in the activity log.