[om2]

That’s not how I’ve heard the term used. The meaning I’m familiar with is “person closely known to the card holder incurs a charge that isn’t really authorized”, for example you might have access to their computer but aren’t supposed to use their saved credit card info for purchases. For example, companies ask for the ability for websites to do biometric authentication via TouchID/FaceID to combat friendly fraud. That wouldn’t make sense under your definition.