How exactly does the fake authorization scam work?

Yes, they're just making the number up, and your cash register doesn't care, it's just writing the code down for reference. The code you get over the phone is proof that you called and received approval for that sale, and if what you entered doesn't match the bank's records, your company has to eat the fraudulent charge. So it's very important to stick to the official procedures.