they (cdnow) used to ship products ordered with any "generated" credit card that passed their basic regex validation even if that number wasn't an actual bank account.