I'd be willing to bet that completely ignoring your customer is a business practice that goes above and beyond the T&C. Unless the T&C says "In the event we flag your account for fraud, we will not touch you with a ten foot pole..."

Again, the problem isn't the automated risk prevention system, the problem is the complete lack of customer service if/when it happens to you.