1) Collection (how data is stolen)
Common methods:
Data breaches at merchants, processors, or SaaS providers.
Point-of-Sale (POS) skimmers and shims on ATMs/terminals.
Magecart / web skimming that injects JS on checkout pages.
Phishing & social engineering to get card numbers, CVV, expiry...