That's the thing with credit card stealing robots - they are nimble and you don't know if they are stealing from you.

Likewise, if I go to a website and serves up malware, you don't know it is stealing from you.