Misuse essentially means that the authorisation code has fallen into the wrong hands. The registrar is responsible for verifying that the person requesting the authorisation code is the domain holder and ensuring that the code is provided to the domain holder. If the code falls into the wrong hands, an unauthorised person could initiate a registrar transfer.