I'd guess they are using Zeus's zaplocker which basically holds the payment until the person opens Zeus.