Thieves don't need your card to steal your credit