Just had a failed order through Sagepay on my website, car body dent puller. Few minutes later, order success for just over a grand of stuff.. u.k address.
1st credit card from Banco Bradesco, Brazil. Second card with different number, same bank.
Reckon so. Quick google shows up Brazilian random credit card number generators.. I’ll speak to sagepay in the morning. Crazy thing is he’s put what seems to be his actual name, mobile number and address on the order.