Maybe that hypothetical, bad person needs to find out what is triggering the account locking, first. Many small sums per gift card? A sum over a certain threshold? The point is, in reality it will not be up to pure chance.

However, I personally would not do that anyway.