PENDING/unconfirmed rewrite - record only reductions in the local sender's balance and prevent the user from sending more than he has