Yes, they do. Card aint worth shit until you get it activated at the register.
Trying to enter a stolen card is pretty damn stupid, as Microsoft can get your address from your IP and have you prosecuted. I doubt they'd go that far, but you never know.