Bruce Schneier also has some stories of different but related credit card scams which also exploit the fact that authorisation codes are not checked at the time

Bruce Schneier also has some stories of different but related credit card scams which also exploit the fact that authorisation codes are not checked at the time of the transaction: https://www.schneier.com/blog/archives/2014/07/debit_card_over.html https://www.schneier.com/blog/archives/2014/07/debit_card_ov... and https://www.schneier.com/blog/archives/2009/01/in-person_credi.html https://www.schneier.com/blog/archives/2009/01/in-person_cre...