Dropping their payouts right down to unauthorized requests is discouraging