The thing to remember is that the credit card companies have quite extensive security systems. For instance, when ordering online, if the shipping and billing addresses don't match, it will probably automatically raise a flag and be checked manually. Also, if you've never bought anything outside the state you live in, and there's suddenly a charge from half way across the world, that will trigger a flag. One way to get money out, is to make fraudulent charges where the item sold isn't actually being sold, and the "seller" is in on the scam, but that kind of sites are usually caught quite quickly too. So for the most part, you should still be pretty safe.