NZ Post recently had issues with their website. Before the issues have been announced, I tried to book a courier and the website displayed an error (along the lines of "try again") then automatically refreshed the page, telling me to try again, and so on, until I figured out that it is actually withdrawing money out of my account every time the page is refreshed, and I closed the browser. At that point I already had multiple transactions "pending" - which I did not authorize.
The "fun" part is that I contacted NZ Post immediately about it, and I was told to "call again in 10 days" for inquiries about the money taken out of my account without authorization. I raised a complaint, explaining that this is basically fraud, and I got a response along the lines of "the credit team will provide an update in the next business days" - end of the week now, the "credit team" provided no update, the money have not been reimbursed, and no further answers from NZ Post.
While a website can indeed be broken, making multiple unauthorized bank transactions from that system then refusing to return the money is absolutely unbelivable!