The easiest way is via on line transactins. If you dont use your card online then the 2 other common options is they rifle the bins for bank detail.(The banks as well as your own) or the one I see most Skimming.

http://idtheft.about.com/od/methodso...p/Skimming.htm