The user must take additional action before the deposit / withdrawal can complete, for example an email or 2fa confirmation of a withdrawal.