diff --git a/server/users/tests/test_login.py b/server/users/tests/test_login.py
index adfa4a30..02158f3c 100644
--- a/server/users/tests/test_login.py
+++ b/server/users/tests/test_login.py
@@ -163,6 +163,14 @@ class PasswordResetTests(TestCase):
         result = self.make_login_mutation(ME_DATA['email'], 'test123')
 
         self.assertFalse(result.get('data').get('login').get('success'))
+        # todo check message
+
+    @patch.object(HepClient, 'is_email_verified', return_value=False)
+    def test_user_with_unconfirmed_email_cannot_login(self, post_fn):
+        result = self.make_login_mutation(ME_DATA['email'], 'test123')
+
+        self.assertFalse(result.get('data').get('login').get('success'))
+        # todo check message
 
     ## can login with license and user
     ## can login with no user and license