Haven't used one myself but iirc a credit card number is generated on the fly for each transaction (or maybe a set of transactions). So someone trying to charge you again will fail if it's no longer valid, and you can't correlate it easily with other data.