Good one. At first I didn't get how this worked, but then I figured you run a donation site. One idea for you: if you can distinguish the illegal card validati

Good one. At first I didn't get how this worked, but then I figured you run a donation site. One idea for you: if you can distinguish the illegal card validation attempts from 'normal', keep them - card companies pay for up-to-date pools of stolen card numbers to weed out the fraudsters from thei stream of transactions. Though this potentially violates PCI-DSS.