@NotATether would you mind (and anyone else who got a card from them too) giving out the 1st 6 digits of the card.

Although *far* from definitive as to where they are, having the BIN / IIN will at least let us know what bank they were using to issue the cards. Might give a bit on insight as to where they were operating from. Not to mention a call to the bank security office might at least slow them down on the next scam. Probably not, but it can't hurt.

Side thought, makes you wonder if there is a good profit center in doing this:

Setup a business. Get a credit card from a company that allows unlimited employee cards that you can set limits on. Charge people for the card (profit), give a crappy exchange rate for the BTC -> fiat load (more profit), then set the limit of the card to that. And take the rewards / cashback that the card offers (even more profit).
Obviously all the KYC would go back the the business, but does that really matter?

-Dave