Today's "fun" is that someone made two purchases in Uxbridge Sainsburys using my #Nectar card. First of 7000 points and then 8500 leaving my balance at *minus* 6634.
There seems to be two morals to this tale:
1. balances aren't updated in real time so it's possible to "overdraw"
2. the only validation on a purchase is the QR code of your card number. So a perp can make one and try it and repeat until they find one that works.
(1/2)



