FYI:
In sweden there was a TV-program about carding and fraud, mainly on Wifi-(in)security and they logged onto IRC, like Undernet or some shit and found a guy that sold them d+p for $100.
They got the dump and pin by email, without using it, they tracked down the owner, called her and checked...