A warning for those who use CUP cards. I used it in a Shanghai restaurant, and the waitress clearly stole my card details. That evening, there were two online transactions each for US$3000. After speaking with the bank, UnionPay apparently does not offer password identification for online transactions like VISA/Mastercard does. So be careful, do not lose sight of your CUP card when you pay.