Yes, but to do that they would need to hack my credentials, and wouldn't actually need the card (like Amazon).
In this case they get the card, so it would be that they would put it into some new website that I don't have it registered to, or it would come across as a new account number using...