diff --git a/storage.c b/storage.c
index c0e2d4342d..ec856f7de5 100644
--- a/storage.c
+++ b/storage.c
@@ -730,7 +730,7 @@ secbool storage_unlock(uint32_t pin)
     wait_random();
     if (ctr >= PIN_MAX_TRIES) {
         storage_wipe();
-        ensure(secfalse, "pin_fails_check_max");
+        error_shutdown("Too many wrong PIN", "attempts. Storage has", "been wiped.", NULL);
         return secfalse;
     }
 
@@ -779,7 +779,7 @@ secbool storage_unlock(uint32_t pin)
         wait_random();
         if (ctr + 1 >= PIN_MAX_TRIES) {
             storage_wipe();
-            ensure(secfalse, "pin_fails_check_max");
+            error_shutdown("Too many wrong PIN", "attempts. Storage has", "been wiped.", NULL);
         }
         return secfalse;
     }