dupe-protection: user gets message