The article mentions that stolen credit cards are being used to buy some of the tokens. Also credit card chargebacks (pay for tokens with CC, resell tokens, then do a chargeback.)