I think what we are seeing here is a new way of scamming RCU members. Find someone with a good reputation (John aka Cactusflyer) and make the purchases in his name. Then show up to pick up the merchandise and pay with a fake check. The seller thinks he is dealing with a respected member of the RCU community, and will in most cases be OK with accepting a check.

Very clever.

Question is, are the RCU passwords secure enough or what can be done to avoid scenarios like this?