Do you really think there is any type of transaction that terrorists or "bad guys" in general have not used yet?
You can be sure that they have and are having still. Instead of dealing with banks or carrying big suitcases ful of money it's easier to just go with a smartphone and confirm a simple transaction.