You seem to think VISA and Mastercard have the desire to reduce fraud, they dont. They have a desire to reduce their liability. PCI DSS is largely a marketin

You seem to think VISA and Mastercard have the desire to reduce fraud, they dont. They have a desire to reduce their liability. PCI DSS is largely a marketing ploy, and way for them to shift liability from banks and the network to the merchants. As a security standard PCI DSS is terrible Further storing card numbers is not a violation of PCI-DSS, it would be impossible for them require that as reoccurring billing, auto-pay, etc have a requirement for the PAN to be stored. Look at Amazon, it stores my card number, in full, so I can checkout with out having to reenter it every time