First of all usually a vpn isn't enough and you need a proxy from THE SAME REGION of the card.
Next you have various options:
- you find a website that doesn't have 3d security. Today it is VERY VERY hard, especially if you want to transfer in crypto.
- you order a card that is not relatable to you,use a merchant service disabling 3d secure(Stripe could be a good idea but you have to bypass KYC) and finally you can create a fake payment through the merchant from the stolen card to your card.After done that you can try to take the money on websites like coinbase(again you have to bypass KYC) and transfer in crypto or you can withdrawal money through the ATM.