Charging a small amount is more optimal since it mitigates API spam without having to set a low rate limit. It also ties your users to a financial id, which is (probably) harder to get in bulk for nefarious purposes than just requiring a phone number to sign up.