pull down to refresh

Maybe only zap after they replied. That requires at least a little bit more effort and any effort scales bad for scammers.