Not sure how Amex or Citi handle AUs, but Chase AUs share the same card number, exp. date, security code, and billing address as the main cardholder, so I would imagine it is easy for Amazon to figure out which cards are unique in their systems and which are authorized users.