The card is transfered by trust or using a merchant in the steem monster discord.
The money transfer is SBD obviously.

Steembay only announces (and tags) the winner, and makes sure, timing and edits are consistent.

For security scammers can be blacklisted by steemcleaners.