The problem has to start with the source. If you're really a seasoned MS'er, then you realize that there is not a ton of variation in the GC numbers, nor with the expiration dates. Combine that with sites that allow you to purchase without CVV (and I'm not listing them), it is possible to brute force combinations.