Bots in the business of CC fraud are often written specifically for that website, so you might have bots register a few hundred accounts a day to try the CCs. All I’m saying is that ReCaptcha is a scapegoat, other big websites and services get away with doing their own fraud detection (Stripe, Shopify) because they’re good at it and have a team dedicated to constantly improving it.