A fraud attempt on a never-used debit card reveals a surprising way criminals can exploit card numbers digitally without physical access.