[youngtaff]

Ten of so years ago I was on a train and the women opposite me gave all her credit card details to someone over the phone — anyone close by could have had fun with them

[master-lincoln]

Is that still a thing in the USA that you can buy with just a credit card number, validity date, name and 3 digit code?

In the EU we have psd2 mandating a second factor. Usually an app where the transaction has to be confirmed.

[gorfian_robot]

Yep. the US has always been behind on this bc both the card companies and the merchants are loath to spend an extra .01% to implement better security.

Apple Pay on mac is the best we got. Looking forward to getting a new mac this year in part just for that.

[drnick1]

The second factor is a true annoyance, especially because in Europe it tends to be an "app" that requires iOS or Google-certified phones.

[youngtaff]

This was in the UK, before 2FA was more common for Cardholders not Present transactions