Another idea - you could record those transactions using a custom transaction and then not give the user permission to that record type.