There's also the one where an employee is able to swipe your card twice--once in the real machine, and once in a hidden card reader. The reader is kept in an apron, below the counter, etc. It only takes a second and a little distraction for a second swipe. The data are retreived from the card reader later on. A few (weeks, months, etc.) later, charges appear and there isn't much of a way to trace where it all started...
