Between 2016 and 2021, the criminals used the stolen card data to create about 19 million fake online subscriptions (for pornography, dating, and streaming sites), deliberately keeping charges low (~€50/month) and using vague transaction descriptions to avoid detection. Five executives from four German payment‑service providers allegedly colluded with the fraudsters, while shell companies in the UK and Cyprus…