[alistairSH]

The US doesn't even do chip+PIN, just chip. I have to assume the US is fine with a higher baseline level of fraud than the EU. I don't know how the economics make that work.

And online, the validation/authorization isn't any better - as long as somebody has the card number and my zip code, they can do as they please (until/unless some banking anti-fraud algo picks it up).

[lotsofpulp]

It’s crazy to me too. A few years ago, all the card networks told merchants that any in person merchant who does not use chip transactions will automatically lose chargebacks, so whatever in person merchants have not converted to chip are simply not willing to invest in updating their systems.

[alistairSH]

They've pretty much all moved to chip at this point, at least IME. It's the lack of PIN that confuses me. All the terminals have pin pads already, but whether they request the PIN is pretty spotty (seems to be bank card vs true credit card?).