To elaborate, a merchant can easily monitor (or pay someone to monitor) transactions being sent to miners in real time. The probability of a successful double spend decreases drastically as the time since the first spend increases. If someone hasn't tried to double spend in ten seconds or so, they'll likely fail if they try.