There's a lot of discretion, I think - it's a customer service issue primarily, but I generally haven't had to provide any evidence (but I imagine if I claimed some high percentage of all my orders from one merchant were stolen, they'd demand proof or ultimately refuse to accept my orders).