What common mistake do developers make with Rollback, why does the mistake cause problems, and what is the safer approach?

What common mistake do developers make with Rollback, why does the mistake cause problems, and what is the safer approach? One recurring problem with rollback is applying it without understanding the boundary it protects. Calling an external payment provider inside a long transaction and assuming the remote operation will roll back when the database transaction rolls back. In addition, Rollback discards changes made inside the transaction when a failure requires the unit of work to be canceled. Safer engineering approach: keep the responsibility in the correct layer, use the framework's supported API, validate and authorize inputs, avoid hidden side effects, and verify the behavior with tests.