diff --git a/src/controllers/write/users.js b/src/controllers/write/users.js
index 026e5db13d..4cea3af1da 100644
--- a/src/controllers/write/users.js
+++ b/src/controllers/write/users.js
@@ -272,7 +272,7 @@ Users.confirmEmail = async (req, res) => {
 	]);
 
 	if (!canManage) {
-		helpers.notAllowed(req, res);
+		return helpers.notAllowed(req, res);
 	}
 
 	if (pending) { // has active confirmation request