That's pretty crafty. I have the credit card bank apps on my phone configured to pop up a notification any time a purchase is made. The spam bomb wouldn't work in that case.