diff --git a/src/pages/PopupPage.js b/src/pages/PopupPage.js
index babb8ed..ba5fcc1 100644
--- a/src/pages/PopupPage.js
+++ b/src/pages/PopupPage.js
@@ -318,7 +318,7 @@ function isSafeInstruction(publicKeys, owner, instructions) {
         if (ownerPubkey && owner.equals(ownerPubkey)) {
           accountStates[openOrdersPubkey.toBase58()] = states.OWNED;
         } else {
-          unsafe = false;
+          unsafe = true;
         }
       } else if (instruction.type === 'initializeAccount') {
         // New SPL token accounts are only considered safe if they are owned by this wallet and newly created