How exactly are these kids getting access to their parents card details? Rookie mistakes being made here. I'd bet it's saved details on web browsers and parents being lax with security - i.e. not having separate user accounts for their kids, not password locking their ****, or not ensuring that their kids don't find out their password.
Or using stupid security questions like "name of first child"
.