1) the amount maximum limits the (potential) damage
2) after a number of transactions, pin is required
3) you need an aquirer agreement, to recieve payments (no, not just a bank account)
4) aquirer, and banks, fraud systems will very quickly catch the fraud

If you want to play, get a proxmark.