a case, comprising a receptacle configured to receive a magnetic security tag that is attached to an item of merchandise;

a wireless transceiver, which is contained in the case and is configured to read identification data that is encoded in the security tag while the security tag is in the receptacle;

a tag removal mechanism, which is contained in the case and comprises a magnet, and which is configured to shift the magnet between an actuation position in proximity to the receptacle and a rest position in which the magnet is farther from the receptacle than in the rest position;

a network communication interface; and

a controller, which is configured to receive the identification data from the wireless transceiver, to transmit, via the network communication interface, a query to a server with respect to the identification data, to receive, via the network communication interface, an authorization from the server with respect to the item of merchandise to which the security tag is attached, and responsively to the authorization, to actuate the tag removal mechanism to shift the magnet to the actuation position so as to release the security tag from the item of merchandise.