> if proper procedures are followed. I have seen the proper procedure violated. I don't think hotels need to comply with PCI, so that safety net isn't there.

> if proper procedures are followed. I have seen the proper procedure violated. I don't think hotels need to comply with PCI, so that safety net isn't there. I am a bit paranoid and I can't just count on people being good and competent. > In this case, the hotel needs the guest's card info to authorize the card after the cancellation period has expired, so that the hotel has a guarantee of being able to collect the money. Won't work with me. I do all online payments with a virtual credit card. The virtual credit card is linked with my actual credit card and I can reset the limit of the card as often as I like. If I am buying a hotel room which lists itself as X per night and I am buying it for 2 nights, I reset my limit to 2*X and make the booking. If you try to slap extra charges on me, the transaction will be denied. In a similar vein, if I don't turn up, I will simply reset my limit to 0. The hotel won't be able to charge me.