If you're going to imitate say, Buzz Aldrin, wouldn't card-based verification require that you steal Buzz Aldrin's credit card, specifically? Neither a random

If you're going to imitate say, Buzz Aldrin, wouldn't card-based verification require that you steal Buzz Aldrin's credit card, specifically? Neither a random stolen card nor a prepaid card are going to work for verification in that scenario. That makes the problem way harder.