We got caught similarly: Phone top-up, pizza, cinema and then they got greedy (£200 sunglasses)and the bank stopped payment.
My personal opinion is that this is result of a crooked employee who takes a copy of a legitimate phoned-in credit transaction. Provides enough information to make a purchase as long as it's something that doesn't have to be delivered to the cardholder's house.