Customer went online to change her address with postal service, was directed to a false/fake site. She thought the charge incurred would be for $1.05, but instead a charge for $1.05 and a separate charge for $59.95 posted to her account, and her address was never changed. So initial charge was "authorize" but for $1.05, instead of the $59.95. The second charge of $59.95, would be considered unauthorized, correct? Since this originally stemmed from a scam, we did not provide provisional credit; but after looking at the series of events, I think we should have. Thoughts?