For carding, you need to use a VPN provider that does not keep accounting logs (logging is disabled).
We cannot predict whether the VPN provider you are using keeps logs, because even if it officially states that it is not logged, it may not be true.
We also cannot know how this or that VPN provider reacts to the police requests that come to them. They can claim that they do not cooperate with the police, although in practice they do it very secretly.
For better security, it is recommended to raise your VPN provider on VPN or servers in Asian countries (for example, China). Guides on how to do it right on the Internet are pretty awesome. But do not forget, if you do this, disable logging on your server for security and anonymity.
But in this case, there is a big minus - since logging can be carried out by a hosting company or the data center itself.
Therefore, working through any VPN is always associated with risks.
If you are not stealing billions of dollars, then it is unlikely that you need to worry about this problem, but you should always remain vigilant.