My guess would be that someone wrote a script to figure out the pin number. Starbucks pin is just 8 random digits. There is no captcha if you put an incorrect pin. One should be able to figure out the pin pretty quickly like this. Once you have the pin you can transfer the money onto your own account or write a script to automate the process.