the thief could have been an employee at the last restaurant you ate out at. It would be wrong to assume the thief could only be via the internet.