This is true, although I think most people generally assume the "victim" in the case of credit card fraud is the individual whose card number is stolen.