The most common scam I see on Twitter is imposter accounts replying to a real person with a link to some crypto scam. Right now you can usually immediately tell it's a different person since the reply doesn't have a check mark, this system seems like it will make it easier since the scammer can just get a checkmark.
You really don't though. It's trivially easy to create new valid unique payment information with a free virtual credit card number and a fake name/address. This is a very hard problem to truly solve.
Are virtual cards actually useful for crimes? I assumed they were primarily for ending subscriptions that make canceling orders of magnitude harder than signing up.
Actual scammers I expect have stolen credit card databases to test.