We don't auto-create accounts - we do them in batches throughout the day.

I am not typically involved in that but I do see the order flow - usually early in the morning.

I can usually spot them before they are created or if they have been created already we just disable it and make some effort to notify the cardholder that something fishy is going on (and ask them to accept our refund rather than issue an annoying chargeback which only complicates the refund process).

This process doesn't scale. That's fine with me and everyone here.