From memory the main countries are Turkey, Germany (AOL)... not sure if thats a GEOIP incorrect lookup though and I think around China also. I will have to check the records.
When a sale comes through we do several checks to ensure the order is real from IP matching the billing location, CVV, Name and address matching the domain registration details of the domain they are transferring and ocasionally a phone call should something look a little gray.
Anything that doesnt match is stopped asap.