Capitec Banks weak online security

Woke up this morning with 3 notifications from Capitec Bank of online purchases from KFC even though the store was closed.

Upon going through my statement I noticed that the purchases were duplicates of purchases I had made at KFC on the 26th and 27th of February.

I find it very worrying that Capitec security systems are so weak. That a 3rd party can just duplicate purchases you had made successfully without goin through the various security measures ie. pin and cvv

This leaves us as customers open to ********** transactions. Hope I'm not given the run around with regards to my refund.