Honestly, nothing will stop them. If one path is blocked, they will go through the next. I had people buy templates from my sites from stolen credit cards. They purchased ten themes, totally $400. Not fun at all.
I tried blocking their IP, that did not stop them. They were using USA/Canada cards.
The best solution is to not accept credit card payments, I think, if it can be done through PayPal (?)