That what services that offer disposable and merchant-locked virtual cards are for. I have had good experiences with Privacy.com and Revolut.

What info can be gleaned from that? Surely the mere fact that you have a credit card means your name and billing address are floating around.

I guess your parking history around town could be valuable if someone is targeting you.

> What info can be gleaned from that?

The card number?

In 2026, having my credit card number compromised is the least of my worries. At least here there is an established process for denying charges and ordering a new card. As long as you're not using a debit card, this is not a big deal.

My bank will reverse debit card charges. Based on that, I assumed that was a standard thing now.

The problem is debit cards leave a window where you don't have access to your own money until it gets reversed.

Only time I've seen that is the stupid holds that hotels do for deposits. The time I had the bank correct a debit card issue had the money available immediately. The only real hold on the account was waiting for the new card to arrive, but the funds were available

What happens with credit card? Is your line of credit reduced until it gets reversed?

Most people have a line of credit far larger than their actual use. With a debit card that's coming right out of your account, which means your mortgage, if it comes in before you notice the issue, is going to then fail.

This is also partially that people don't put critical bills on their credit card typically. And even if your credit card does get maxed out, you typically would have a second credit card handy. But those credit card payments have to come out of your bank account and so you're risking that you intend to pay your credit card you said Set whatever it is to send the money in but there's no money in your account And so it doesn't get paid and now you have late fees on other accounts

If your debit card is going to a different bank than what you normally pay all your bills out of, this is not a worry. That is not how most people I know handle their banking though, which is why it is a real problem to worry about.

Ok, your card is compromised. It's been cancelled.

One, how much money is in your pocket so you can eat?

ok, you'll use your second ca.... oh, it has to be cancelled now too.

Ok, lets wait a few days for another card, and lets go use it the first time, what hacked already, I guess I need to wait a few more days.

>As long as you're not using a debit card, this is not a big deal.

So screw 60% of all transactions done on a card? This doesn't seem workable.

Why do you have to cancel your second card?

The chance is incredibly small that your second card just happens to get hacked at the same time as your first card.

I have 6 (I think) credit cards, and mainly use 3 of them.

Your physical wallet might also get stolen, and you can be left without cash money.

It's a good practice to keep an emergency debit card at home. And/or a gift card with a couple hundred bucks on it. That's for digital expenses.

And you should also have a bit of emergency cash.

Meh, I’ve been giving out my credit card number willy nilly to merchants for 20+ years, and it hasn’t been used without my authorization over the course of what must be tens of thousands of transactions.

I have a text alert setup for transactions, so I presume I’d be able to successfully challenge any fraudulent ones pretty quickly.

In USA, folks who check their statements monthly are at little risk of immediate financial pain there.

When your lifetime of credit card transactions leaks, that could be financially painful, embarrassing, etc. (can be discriminated against, including with pricing)

I do dislike creating a log of where I park on some random company’s server. Nice that ALPRs/govt.-funded corp spycams/Ring/etc. make sure the quarter method is minimally marginally effective at protecting privacy.

> In USA, folks who check their statements monthly are at little risk of immediate financial pain there.

I had to fight a bank for months over a clearly fraudulent charge. Sometimes it's easy; other times it isn't.

who stores card numbers other than the processors? that should be a hangable offense. I've integrated card processing on multiple sites, and not once does the form come from me. I add the processor's JS, and it collects the data to move along. They then return to me a bit of information that includes success/fail so that I can decide what to do from there.

> I add the processor's JS, and it collects the data to move along.

Consumers aren't gonna notice the difference if the site gets hacked and that JS is swapped out for a malicious set.

Yea, it's insane seeing this person arguing about the nature of credit card theft when we have a million different examples of how it happens and how rarely the end user knows until it's far too late. We almost always learn about itpost ad hoc.

You've moved the goal posts. A typical site isn't storing the numbers so when they get hacked, that data is not available. If you're suggesting hackers directly injecting malicious JS to hijack card data then that's totally different. I'm not insane about this particular subject. You're just standing on a soapbox

The parent post just says "I don't want to put my credit card info in their crappy parking app".

"I'm only talking about long-term storage" is itself a goalpost move!

For example, you have to trust the QR code takes you to the real app: https://www.bbc.com/news/articles/cwyjqg578e1o