File /inc/datahandlers/pm.php, function verify_recipient
$recipient['pms_total'] should be $user['totalpms']
Thank you for your bug report.
This bug has been fixed in our internal code repository. Please note that the problem will not be fixed here until these forums are updated.