There's a summary directly below the video (though its not a very good summary). Basically, it's easily to generate valid tickets with fake bank credentials, which then get canceled later (but after already being resold).