Unable to cancel a transaction

It is with a heavy heart I write this review. I used to test colleagues card details assuring him that Kululala would authenticate a transaction via a registered cellphone number with a bank before processing a transaction. We tested and put random flights details. Before even taking to a part to confirm a transaction, the amount was debited off the card. I would think that after entering the transaction you'd be taken to a confirmation page and then authenticate via mobile. To my suprise there is no way to cancel this. I called the contact center and they cannot reverse this. It means I can pick any card and put through any transaction and there is nothinh a card holder can do? A Pillay can buy buy for a Ntaka and there aren't any authenticating mechanisms in place.