how are VCCs sourced?

Just wondering where the Virtual Credit Card suppliers here get their VCCs? The whole concept is pretty strange, buying a credit card number from a random person on a blackhat forum. How can I be sure its not a stolen credit card number?

Thanks