A 6-year-old purchased $250 in Pokémon items by using her sleeping mother’s thumbprint.