Here's a scenario: I'm in a dodgy internet cafe with a key logger somewhere in Thailand. I need to book a flight and the airline insists on my "Verified By Vi

Here's a scenario: I'm in a dodgy internet cafe with a key logger somewhere in Thailand. I need to book a flight and the airline insists on my "Verified By Visa" credentials. Who do you think my bank blames (even though they state that they won't) when somebody goes on a shopping spree with not only my CC # and my security code, but also my VbV password? As another poster mentioned: It's offloading the risk to the card holder. Something like a token, or two factor authentication would be a lot better.