The tickets were flagged as fraudulent after the guest reported an unauthorised transaction to the rail operator.