Large, state-backed, entities that predate the internet seem to get away with stuff of this kind all the time.

The other day my mother tried to buy a train ticket. The payment went through, but something went wrong on the site and the ticket was not issued.

If this were just some e-commerce site, the payment provider would have had their head on a spike.

In this case she had to go through the usual return process.