You don't even need the magstripe, just the numbers. Card not present payment, somewhat higher disagio, but hey, if it is fraudulent in the first place, they don't care that much.