diff --git a/r2/r2/controllers/listingcontroller.py b/r2/r2/controllers/listingcontroller.py
index 7c6c755d2..4195ca0e4 100755
--- a/r2/r2/controllers/listingcontroller.py
+++ b/r2/r2/controllers/listingcontroller.py
@@ -1313,6 +1313,7 @@ class UserListListingController(ListingController):
         return content
 
     @require_oauth2_scope("read")
+    @validate(VUser())
     @base_listing
     @listing_api_doc(section=api_section.account,
                      uri='/prefs/{where}',