[hnal943]

I think if a conman could get behind the counter in a retail setting, people would give their credit cards over as easily as they do online. No one is looking at the cashier to make sure that they are legitimate, and that's because they don't have to: no retail business could survive news reports of people getting scammed in this way. Honestly the same is true online. There's no expectation that if you started out on Nordstroms.com that your purchase information will be stolen by an imposter. Since Nordstrom's controls the content on that site, it's very difficult for an attack like that to occur.