The single time I was a victim of cc fraud was after using the card to pay for services at the doctor’s office (at a major medical center). In fact I only found out what happened through dumb luck - was on the phone with someone from that office trying to straighten out a billing error, happened to mention that I had the bill at hand because of a fraudulent charge, and he said “waitaminnit”. Turns out, someone from his office had been arrested the week before for taking patients’ credit card info and going shopping.
I’m not. The advisor at the bank made that assumption, my details could have got out any way apart from someone physically stealing it. Currently only have debit card and electron, can’t have credit card when unemployed.
BigT, I asked why credit cards get better protection and was told that’s just the way it is. Maybe she was pressed for time.
Ah, doesn’t always work. My wife has been dinged using her Discover card that way. She used it to buy a gift subscription for someone, only to have the subscription renewed by Discover using the same one-off number. She’s also had it happen when she paid an online bill with her Discover card.
We think it’s a Discover card glitch. I’ve used the VISA card one-off secure number system and been safe every time.
People often call my company to place a phone order. Sometimes they’re just more comfortable talking to a person and sometimes it’s explicitly because they don’t trust shopping online. But, our customer service operators just enter the order via the Internet. It’s a back end phone order application not literally the front end you see online, but it’s still HTTPS via the wide open internet and it’s no more or less secure than ordering yourself. And if you call into my company a customer service rep gets to type in all your information instead of nobody looking at it all ever.
That said, we’re a small company and our ecommerce software is commercial software we bought and customized for our needs. It could easily be set up to make all your personal financial information vulnerable. Ours isn’t, but there’s no outside body validating PCI compliance.