even vcc can be stolen.
My dad got account where he generate Virtual Card for online payments.
So if you steal his account then you make vcc.