[B00MER]

Also I would add this to customer/main/checkout.tpl, find:

<p align=center>
{if $js_enabled}
{include file="buttons/submit_order.tpl" style="button"}
{else}
{include file="submit_wo_js.tpl" value=$lng.lbl_submit_order}
{/if}

And add the following after it:

Your IP address {$smarty.server.REMOTE_ADDR} is logged for security reasons.

This way it will detour any potential fraudulent customers.