From what I learned about types of identity fraud from the last city auxiliary that I volunteered for, some of the bigger fraud rings who operate around the world have plenty of satellite groups working sections of each country and move around. They do a lot of different stuff to get your card number, but unlike a local small group or individual, who usually wait a couple weeks and cash stuff or buy stuff in the surrounding cities, big groups wait a month or two and distribute your account states away and cash out or whatever and you don't know it's happening normally until it's too late.
What pisses me off actually, is how today you can use any of your cards and no one asks ID any more.
You just tell it to bypass the pin number. So ripped off card use is climbing again.