A thief running a scam like this will try 5-10 cards before moving on. Your average customer only owns 2-3 cards. We usually flag a user when when they get 3 declines from 3 different cards - and if it looks suspicious enough at that point, we hellban them.

i'm assuming a couple chargebacks would need to get the ball rolling.