Test should include something with the postconditions.  Assert that the returned transfer is marked as canceled?  Something that would catch an accidental no-op.