This is tricky... When the donor returns from an Ingenico iframe and we fail them for e.g. bad CVV, we need to delete the message from our pending database to prevent orphan rectification and stuff.
But we don't have a way to do that, and it would be a shame to resurrect the "antimessage" antipattern.