I've represented quite a few people who have been charged with CC crimes. The first group of people manufacture their own cards (usually but not always in Asia) by the box load. Since these cards are not stolen, per se, it takes quite a while for the CC companies and banks to catch on. The second group of people are stealing the CC card numbers and the 3 or 4 digit code on the backs of the cards. Restaurant employees are the typical offenders, but it can happen almost anywhere, to state nothing of the fact that many times one has to give out both the CC number and the 3 or 4 digit code when making purchases either over the phone or on line. Then there is a third group of people who are actually stealing the cards. Usually this occurs when a post office employee is in on the scheme.
An anecdotal personal story which happened about 10 years or so ago. My wife calls me in my office and tells me that she was looking out the front of our house and sees a guy walking away from our front porch, holding what appears to be our mail (which, often times, is just left on my front porch. In particular she sees an envelope with what she thinks is a Discover Card return address. I whip out my wallet, look at my card and, sure enough, it was about to expire. Given my experience in these matters, I conclude my replacement card very well might have been in that envelope, so I call Discover and tell them what happened. They immediately cancel the replacement card and process an order for a new replacement card to be mailed to me. Literally 45 minutes later I get a call from a security officer in a Sears department store about 3 miles from my house. The officer asks me whether I had given the card to that person in his office who claimed to be my cousin. I had a good laugh out of that one. I'm sure that guy was shocked when he got caught within an hour of stealing my mail.