Interesting. I thought about something like that. I guess it works a bit like a cheque where the payment is cleared and can potentially bounce later?
There is only one situation when the system faults. And that is when the customers phone is destroyed before updating the server. But these are just virtual pennies for small everyday purchases.