they just need to guess your card number and expiration.
But credit card bank will deny this online/phone charge because name or
zipcode is not correct. Now with chip in the card, thieves cannot
physically swipe (like they did with magnetic tape) anymore.