[logicfiction]

Anecdotally, I got my credit card frauded 3 times over the span of 4 months a couple years back. I started reviewing sites I'd purchased with online wondering where my details might have been leaking out. Lo and behold, a local store nearby had their POS systems hacked. It took a quorum of local people on reddit to identify that it was this store in particular. My point is physical locations are just as insecure as websites and in fact it's usually a lot less obvious than remembering that sketchy website you bought an MP3 from and never going back.

In all cases it was also my credit card company that called me to let me know I was the victim of fraud on my card. Is it really the case that people need to hawk their accounts? I haven't had that experience for years now.