My guess is they check the cookie after the checkout, which is somewhat reasonable. This is an edge case that became a major case due to this scam.