Fraudulent purchase question

A mother-in-law's email was compromised and used to access her Sams Club account. Scammers made $1000 in coffee purchases via the scan and go feature, then immediately returned the items for a store gift card, raising questions about the purpose of the extra steps.