Nonprofits are major targets of card testing fraud, I wonder if that is related