We have the same customers!
They Authorized the transactions by clicking the "I Agree" button & submitting the transaction.
They need to deal with the company directly to get their money back.
We've then had some "savvy" customers who abuse the system & tell us they never do any purchases online and have never given their number out. We credit their the money back ... but then remove their debit card privileges.