If you're going to imitate say, Buzz Aldrin, wouldn't card-based verification require that you steal Buzz Aldrin's credit card, specifically?

Neither a random stolen card nor a prepaid card are going to work for verification in that scenario.

That makes the problem way harder.