diff --git a/src/user/web/pow-captcha.ts b/src/user/web/pow-captcha.ts
index 94c5c18..7b26afe 100644
--- a/src/user/web/pow-captcha.ts
+++ b/src/user/web/pow-captcha.ts
@@ -194,7 +194,7 @@ router.post("/challenge", (req, res) => {
   }
 
   if (action === "refresh") {
-    if (verifyTokenRefreshable(refreshToken, req.log)) {
+    if (!verifyTokenRefreshable(refreshToken, req.log)) {
       res
         .status(400)
         .json({