People is able to submit my form without making an actual payment, why?