Why underwriters ask about it
fraudsters increasingly target the refund path — often through the AI agent — because it's the least-guarded way money leaves.
How to fix it
- Above your R2.2 threshold, verify identity against your records (order number plus contact details on file) before refunding.
- Route account-detail changes (email, payout, address) through the same verification.
- Log refunds with who verified and how.
Evidence to keep
the verification step in your refund procedure and the log.