Case study: Operator finds SAA chargeback loophole