The entirely predictable buys during a thief's 28-hour Paywave spree