Retailers might enjoy better information (account history, items in basket and suchlike), might have already borne the cost of manually checking the order, or might have better incentives (as it's them who loses money if an order was placed with a stolen card)
After all, if the issuer had been able to figure it out, the payments would have failed preauthorisation.