One sure-fire way to make sure you don’t have to wait for your money in the event of a hack attack: Don’t get a refund