Well at least they need it until they get back a success response from the bank/payment processor/whoever.