Lets say these existed. Somewhere there's a big CSV of valid-looking but honeypot credit card numbers. When an attacker uses one to sign up for an AWS account to mine crypto, or buys a bunch of things on Amazon to create fake reviews, or tries to use it to load up a Coinbase account, what happens next?