"I then set up a load of fake accounts, and I find random names and addresses either from publicly available information or from a leaked database that's doing the rounds from a previous data breach. I order Kleinman Candles from my fake accounts"

Do all these accounts have the same credit card number? I'd think Amazon checks card numbers, so lots of accounts can't use the same card. Or does brushing need getting lots of different card numbers too? I wouldn't think they are so easy to come by in bulk.