[prawks]

One funny (ab)use case that may not be immediately obvious: any public API that accepts payment for goods via credit card will sooner or later attempt to be used by carders to test purchased/stolen card lists for validity.

[lsaferite]

So? You mitigate this on the server since you can never trust the client.