> I constantly see various posts regarding credit card skimming and find it curious why 2 factor authentication is not enforced for all transactions. A few rea

> I constantly see various posts regarding credit card skimming and find it curious why 2 factor authentication is not enforced for all transactions. A few reasons: 1) Card issuers don't care because it's merchants who are on the hook for card-not-present fraud. 2) Cardholders don't care because they're never on the hook for fraud. 3) If a specific merchant enforced 3DSecure (to move fraud liability back to the issuer/network) they'd lose more money on lost sales from people that hate 3DSecure (everyone?) than they would save on fraud. That said, I have seen 3DSecure enforced at ultra-high-fraud merchants like Bitcoin resellers.