Who buys stolen credit card numbers without a way to verify that they’re usable? There are probably forums and other shady marketplaces where regular sellers can build a reputation and offer discounts on the card values so buyers are willing to take the risk. Not like they’re losing their own money on the transaction.