To be fair there's absolutely no frickin' way that you could predict that people would enter their bank in place of their employer.
Still there is lots of web forms with a Country field and a State field. And in the state field you'll only find American states.
// I wonder how many Internet residents live in 90210? I know I do in a couple of places.
But as it relates to this specific example, I don't see how to test it. Surely you're not going to just randomly remove fields from forms, to see if anything good happens. The only way I can see to deduce this particular problem would be if the site is storing all of the failed checkout entries. And I think that's the wrong thing to do in this case, because of the privacy implications
Especially in the travel industry where credit card fraud is very high, storing failures is important for auditing/anti-fraud activities, not to mention customer support.
When a customer calls you to say "my transaction failed", and you respond "We don't have any record of your transaction" at best that makes you look unreliable and at worst the customer thinks you're calling them a liar.
It seems to me that a common failure mode would be entering a value into the wrong field, and that includes putting the credit card number into address or something. I want to do everything I can to avoid storing a credit card number (except for the one place it's saved, encrypted, at the customer's discretion).
Six years later, nobody has checked the form since. After all, that isn't their job.