And just what would they do with it?

That seems an easy way to get your merchant account cancelled very, very quickly.

But why would they care? Stripe does payments every 3 days or so and you can easily create more accounts. I never ever checked my credit card history, and I assume many people who only use it as secondary payment system don't. It's easy as fuck therefore IMO a valid scenario.

Without the CVC code, Stripe isn't going to accept the payment.

Even if it did, the bank is likely to block the transaction, or call/text for verification.

> CVC code

I heard that those are very easy to crack. It might have been this article from 2011 where I read about this (German, sorry): http://www.zeit.de/2011/21/Kreditkarten-Sicherheit

Not to mention half of the database leaks in recent years, especially of porn sites, contained them anyway

The defence against that for me is that I have like 6 rfid enabled cards in my wallet, between my Oyster Card, student ID, library card, key card to access my work building, you can't scan any of them without taking it out individually.

I carry two contactless cards: the metro pass and an office key. They are just taped together (because I want to make sure I always have both) and still reliably work, so I doubt you are protected.

I have tried many times to use a single one of them without the other 5 interfering and it has literally never worked.