The actual card doesn't have to be stolen. All they really need are the numbers. It happened to me for over $600.00. Someone got my numbers, probably from an internet order I made, and used it that way. I knew nothing about it until I got my statement. Heck, it could be happening to any one of us right now.