Lessons from a CNP Fraud Scheme – Part 1