Maybe providers of these services should start randomly return 402 return code. At least for those request which do not have sufficient authentication linked to existing payments.