Yes. Or at least must have planned it in advance.

Maybe there is a vending machine at the peak of a mountain where neither the machine nor the users will have Internet access. You could plan in advance and get some tokens for that machine.

But does that mean that the sender must be online to get the token from the mint? Otherwise, how to obtain a token with my pubkey in advance?

025738dda8

Ff the sender creates a token locked to your public key (for untrusted transactions), then no, no one else can reclaim it because only you can redeem it with your private key. The trust there is in the mint.