I run a web service with a subscription component, friends of mine run an IPSP.

> Is the stolen CC # problem greater with certain kinds of businesses than others?

Yes, absolutely. If you run a service targeted at businesses or teachers or other 'nice' people you're likely not going to see much, if any of this. If you run a site that sells physical goods you'll get plenty but you will be able to do some pretty good checks before shipping the goods and you'll have a signature from a recipient. You will likely also have a list of destinations you do not serve.

If those are not your target markets then all bets are off and you will likely get bitten badly before you learn the rules by which the game is played.