Users look for recently shared BIN numbers on forums.
If the payment gateway doesn't perform a "hard" authorization (charging a small temporary fee), the fake card might be accepted for a 30-day or 3-month free trial. The Risks and Consequences bin spotify premium