A customer of mine was able to process duplicate payments for a payment link I sent them. They payment link should not allow duplicate payments or should expire once the initial payment is processed. Otherwise, two people from the same office can pay multiple times without knowing.