BBVA servers confirm payments twice and order gets paid twice too

Sometimes BBVA access URL to confirm payments two times (even from completely different IP). Commerce BBVA doesn't check this so order gets the same payment two times. So, if order cost is N, balance ends with -N instead of 0.