And you'll need to address this whichever approach you take. If you can't pin them down to an identity, you'll probably need to take a deposit.