avoid unauthorized transactions