Earlier quoted context omitted.
But this is software as a service -- if fraud is detected 48 hours later, it seems like Adobe should just be able to disable the user's access at that time. They didn't lose anything by letting the user use Photoshop for two days.
> They didn't lose anything by letting the user use Photoshop for two days. But they did. If they don't catch the fraud before capturing the funds, then they'll find out about it when the real card holder charges back the unauthorized payment. Now they: 1) Lose the $10-25 chargeback fee. 2) Risk their ability to accept Visa and MasterCard cards at all if their chargeback rate exceeds 1% for multiple months. The harm…
Also keep in mind that this is a pretty expensive software package, so I would think they should have a team that works on this.