what happens if you don't invalidate them?
You'll get a chargeback when the owner sees it
It's an unauthorised payment so I guess at that point the police get involved.
You'll get a chargeback when the owner sees it