This kinda tracks. One time someone I knew bought a series of games on Steam at once, and his bank blocked them. In calling them, he learned that (in addition to some other circumstantial clue) their pattern recognition picks up on game purchases, since that's an excellent target for someone who just stole a credit card. Scammers can often resell the games in some way, through some anonymity.