Online payment fraud is a retail risk year round, but never as much as during the holidays.