Because when you scan the card, the reader “asks” a server for verification. It’s usually quick because it’s just the door ID and card ID, and the response either “yes” or “not yes”. (A non answer is the same as a no, that’s why sometimes you have to do it twice.)