By now everybody will have come across 3D-Secure, or to give it its trade names; "Verified by Visa" or "MasterCard SecureCode".
This is the system where as you click the Buy button on a website, you are magically transferred to your bank or card issuer. There you have to enter another password, your mother's maiden name or your shoe size. In theory it all seems straightforward enough but...
So, we're asked to give up our pins and passwords to a third party service we can't check out. Sounds more like a phishing scam than enhanced security!
You might be asking why this has happened? Well, when a card is used fraudulently it's the retailer who loses out. If a crook buys a new flat screen TV using your card, they get the TV and you get your money back. The retailer is a TV short with nothing to show for it.
If the payment went through 3D-Secure then the liability is shifted to the card issuer/your bank. This is why retailers, apparently, are in favour. However, we know from experience with Silkmoth's web retailers, there's anything from a 9% to 21% reduction in 3D-Secure sales because customers don't complete their sales. It's just too complicated/scary for them!
So the retailers still lose out and that's why I hate 3D-Secure. It's bad for everyone.
The elves are back...