[karaterobot]

Given that there are no laws against using credit cards this way, is bad customer behavior just defined as customers not doing what you want them to do? I would suggest that you should account for real customer behavior rather than just characterizing it as malicious, which does not seem like any kind of solution.