[throwaway211]

Interesting point, and how much falls between the issuer and the marketplace?

For example, I could setup a fake product on ebay to facilitate payments to me. eBay shouldn't need to do CTF checks on this possibility.