diff --git a/core/viewsets.py b/core/viewsets.py
index 1b697c73..4e3c7973 100644
--- a/core/viewsets.py
+++ b/core/viewsets.py
@@ -1,6 +1,7 @@
 from uuid import UUID
 
 from django.http import Http404
+from django.utils.decorators import method_decorator
 from django.utils.translation import gettext_lazy as _
 from django_filters.rest_framework import DjangoFilterBackend
 from django_ratelimit.decorators import ratelimit
@@ -283,7 +284,7 @@ class OrderViewSet(EvibesViewSet):
             return Response(status=status.HTTP_404_NOT_FOUND, data={"detail": _(f"order {order_uuid} not found")})
 
     @action(detail=False, methods=["post"], url_path="buy_unregistered")
-    @ratelimit(key="ip", rate="2/h", block=True)
+    @method_decorator(ratelimit(key="ip", rate="2/h", block=True))
     def buy_unregistered(self, request):
         serializer = BuyUnregisteredOrderSerializer(data=request.data)
         serializer.is_valid(raise_exception=True)