client cannot withdraw more than balance