Originally Posted by
DYKWIA
Thanks. So John Lewis will be will forking out for a fair few cases here, and BA get away it...
Although... surely the cards were not stolen? John Lewis wouldn't know that the card details had been leaked, and the card could still be used legitimately by the holder.
You're right, but what you'll find is that they've measured the risk of some fraudulent transactions getting through over the inconvenience to legitimate customers by implementing tighter controls. IT Security staff would have a raft of proposals to get to close to zero risk of fraud as possible, but that would be outweighed by possibly the cost of doing so and the possible extra factors. It's interesting to see that most people are happy to accept two factor authentication now however, but that's probably as they are more concerned about data theft than card fraud that would be covered by the retailer/card provider.