The same thing happened to me. My solution was to block an IP address from making a purchase after N failed card attempts. It worked well enough to get me back off of the radar of those scammers.