I was wondering how they did it - that's really cool. Thanks for the link.

Well I knew that they used the refund rails, but I was curious how they protect against fraud. This seems to imply that there's nothing magical regarding the anti-fraud: they just try stay on top of it.