It seems like this scenario could be prevented even within the one-week pre-auth limit cited above. That is, pre-auth every donation a week before the campaign ends. The pre-auths that fail would then be subtracted from the total, and a week is long enough to either pay your credit card bill or decide that you can't contribute that much.