Why it matters
Online, there is no chip and no PIN pad: anyone with a card number, expiry and CVV2 can try to pay. Most card fraud is card-not-present. Two tools fight back:
- 3-D Secure authenticates the cardholder with the issuer.
- Network tokens replace the card number with a value that is useless elsewhere.
Merchants, gateways and acquirers must carry their results correctly in the authorisation.