The only reason this is possible is because card payment systems still are using transistor era technologies with zero cryptography. You get someone's card numb

The only reason this is possible is because card payment systems still are using transistor era technologies with zero cryptography. You get someone's card number and you can pay with it. All VISA security is based on trust. With Internet it doesn't work anymore because you never know who your customer is, you don't know what merchant does with card numbers and the laws are different in different countries. They also lack privacy: your name is written on a card and in every transaction you use the same card number so merchants can collect person's shoppping history (and using a name they can find customer's page in social networks). And maybe they even share this information among themselves. Not in every country there are laws protecting clients. In US there is a law, but in other countries if your card number got stolen you might never get the money back and even be left with a debt if it was a credit card (because it is client's responsibility to keep his card info secure). When you are buying something online with a card there is no way to check whether it is a real shop or just a fake site to collect card numbers. As a result merchants make their own sophisticated antifraud system and you never know whether your card would work or not. For example once I was unable to pay for a Digital Ocean server with virtual prepaid card (of course I would never pay with a real card on the Internet) so I chose another cloud hosting and they lost a customer.