authenticate before notifiying of insufficient funds