Seems pretty easy once they get the card. Just activate it by calling the telephone number on the card and entering the 16 digit card number and Voila! The delivery envelope lets them know a credit card is inside. I’m surprised that a better way to send customers their cards has been figured out.
It doesn't work that way unless the fraudsters can spoof the victims telephone number or have hacked their account.