diff --git a/proxy/vmess/aead/authid.go b/proxy/vmess/aead/authid.go
index 1c4541a5..c357d6fc 100644
--- a/proxy/vmess/aead/authid.go
+++ b/proxy/vmess/aead/authid.go
@@ -96,13 +96,14 @@ func (a *AuthIDDecoderHolder) Match(AuthID [16]byte) (interface{}, error) {
 			continue
 		}
 
+		if math.Abs(float64(t-time.Now().Unix())) > 120 {
+			continue
+		}
+
 		if !a.apw.Check(AuthID[:]) {
 			return nil, ErrReplay
 		}
 
-		if math.Abs(float64(t-time.Now().Unix())) > 120 {
-			continue
-		}
 		_ = r
 
 		return v.ticket, nil