You trust the mint but you do not need to trust other users. The receiver of a transaction needs to be online in order to refresh the token they received in order to prevent double spending. If there's no Internet, you need to trust the sender (or all previous senders) and the mint.