Not done it myself, but on an IT course I went on a few years ago the instructor showed us part of the dark web, basically a catalogue of stolen credit cards, $15 each. WIth PIN and CCR code. Hundreds of them. Not something for the unititiated to be messing with!