acutually the above method with the old swipe machine would require a real card to be swiped,the new way of accepting cc online is where the vulnerrability is as it is card not present,but you do need to know the 3-4 digit security code,beside card number,address,expiration date,most sites require the 3-4 digit security code.
In UK,once a security guard outside a supermarket noticed on his phone that there were busy busy transmission going on in the area,he called Scotland Yard,and it turns out that the machine for accepting card has a chip inside which will copy every tenth credit card data used by customers and every day around noon ,it will dial a number and send those data to a communication tower in Pakistan,
It happanes in US as well,a service rep who comes to a large chain store to maintain the cc machine slipped a chip into the machine to copy our cc data,
On a smaller scale,a waitress can take your credit card in a restaurant to be charged at the back office,or run next door to a gift shop and start shopping, by the time your cc statement arrives,she has already been enjoying her new gadget,clothese,shoes etc.
