POS scams are difficult but not impossible to pull off. Here's how they work—and how you can protect yourself.