I buy through allofmp3.com and happily handed over my credit card details, I think all cards have some kind of online fraud guarantees anyway. As far as I am concerned I'm paying for the music and the artist is getting some royalties, it's not theft. Someone else can figure out the legality of it and should someone from the record industry here in the UK demand I stop using it with some legal authority, I will. I stopped using napster when it became illegal, I'll go the same way with this.