Is that some sort of a replay attack? If so why isn't the timestamp embedded in the encrypted payload
It relies on the fact the clients clock will have a few milliseconds of error so they'll be unable to detect it.
If the client had an atomic clock, this attack wouldn't be possible.