Bruce Schneier also has some stories of different but related credit card scams which also exploit the fact that authorisation codes are not checked at the time of the transaction: <a href="https:&#x2F;&#x2F;www.schneier.com&#x2F;blog&#x2F;archives&#x2F;2014&#x2F;07&#x2F;debit_card_over.html" rel="nofollow">https:&#x2F;&#x2F;www.schneier.com&#x2F;blog&#x2F;archives&#x2F;2014&#x2F;07&#x2F;debit_card_ov...</a> and <a href="https:&#x2F;&#x2F;www.schneier.com&#x2F;blog&#x2F;archives&#x2F;2009&#x2F;01&#x2F;in-person_credi.html" rel="nofollow">https:&#x2F;&#x2F;www.schneier.com&#x2F;blog&#x2F;archives&#x2F;2009&#x2F;01&#x2F;in-person_cre...</a>