alt Hacker NewsIn my country you usually need to confirm payments with SMS OTP, except for trusted merchants (but they take the risk of fraud by opting out from confirmation). So simply stealing a bank card doesn't get you far. And pretending that you did not pay is also more difficult. Is US different? Do banks and clients trust each other in US and do not require OTP?
Yep. If I take someone's credit card, I can use it all I want, until either 1) they notice and cancel the card, or 2) I trip the fraud protection with unusual spending patterns.