I've had CCs stolen because DMV + FasTrak required CC info and can't use PayPal. PayPal / Shop are great because they don't share your actual CC info with the m

I've had CCs stolen because DMV + FasTrak required CC info and can't use PayPal. PayPal / Shop are great because they don't share your actual CC info with the merchant, only a one-time token for that specific transaction. All credit cards should work this way, where you'd log into your bank or 2FA with your bank (or Visa / MasterCard) and they'd provide the merchant with an auth code or something just for that transaction for that invoice to that merchant, instead of giving them the keys to the actual card. They even do have something called "Visa Secure" and "Mastercard Identity Check" ( see https://stripe.com/guides/3d-secure-2 https://stripe.com/guides/3d-secure-2 ) but I've never seen this come up in practice. I guess it's easier for them to just let merchants assume the fraud risk. We need some laws that put the burden on the card issuers to get them to actually care about CC fraud, but obviously the ones benefiting from the current system are very well-funded and have lots of sway with lawmakers.