My understanding is that the SEC expects you to require proof of an alternate citizenship via a passport. Simply having a drop-down that users can lie about by clicking a box or using a VPN is not good enough.