I should have better clarified what I meant. I think online payment systems that require you to enter: - your name - the card number - the expiration date -

I should have better clarified what I meant. I think online payment systems that require you to enter: - your name - the card number - the expiration date - the CCV security code In any system that is not controlled by your bank is very insecure. Since that is exactly the information required to do to new payments. Payment systems like iDeal simply connect (oath style) to your bank where you login securely and approve the payment. Recently I booked a hotel room using Agoda and I used a credit card to pay, here is what happened: - Agoda received all the information above from me. - Agoda used booking.com to "fulfill" the booking, they passed all of my credit card details to booking.com - Booking.com gave my credit card details to the hotel (actually a small family owned guesthouse). - When I arrived the guesthouse has written down all the information above on a post it attached to the monitor. Before telling them who I was they showed me the post it and asked me if that was me. There only about 5 places in the above list where this can go wrong...