[Мария]

Both set ups seem like an overkill unless you're going to steal over 100k, but second setup looks more solid.
You need something (an RDP or Socks5 or SSH) that matches cardholder location and has residential IP (e.g. not a datacenter server IP range as they all are flagged as high risk by payment processors).
Use a VPN from 3rd country, not the one you reside and not cardholder's one either. Like if you're in the UK and ch from the states use a vietnamese VPN then connect to an RDP or use socks that matches state and city (ideally ZIP code) of the cardholder and you are good to go. Use double VPN if you wanna have extra security. A disposable laptop and 4G internet that's not linked to you or public wifi and VPN + RDP/SOCKS are the most ideal set-up, unless you get involved with hacking govt websites no one will bother finding you.
And remember, most people get caught when they cash out stolen money or when they become too noticeable (like developers of major trojans and ransomware) or just because they talk too much.