If the payment gateway decides to not implement this kind of protection, the payment goes through anyway (I'm guessing it'll be more expensive for the merchant, but still).