Anytime a company pisses me off I set up a while loop to generate Luhn-compliant 16-digit numbers and spam them on every html form on the site.

PCI audits are fun for everyone

No I mean ones that are actually connected to Visa's network and you get an API call from Visa when someone uses them.