Many websites ask for payment by entering information from Credit card such as VISA card/ Mastercard etc. Now, till date I knew that I should never tell anybody about these numbers. Then why these websites ask for credit card details and if (suppose) any of them have a malicious intent, then what can they do with these numbers?

Basically my question is, how it is being ensured that they will take the specific amount of money/ cost upon my consent; and without my consent they will not take money? Will the bank send me some verification code to my phone?

I never yet used online transactions and I am very confused to understand its steps, do's and don'ts etc. I have searched Google and Quora but I didn't find anything helpful.

I would be thankful if anyone can explain how this specific online transaction mode (by entering credit/debit card number) works and how an without-consent-transaction is prevented, preferably via a flow chart.

Many thanks in advance.

  • 1
    every transaction would require CVV and 2fa in my country,but still you shouldn't hand anyone your credit card numbers willy nilly
    – yeah_well
    Jun 10, 2020 at 17:51
  • But how it is ensured that those numbers cannot be used to draw money without my consent? Jun 10, 2020 at 17:54

1 Answer 1


Credit card fraud is a risk managed primarily by two things: chargebacks and anti-fraud monitoring.

A chargeback is when you say "Hey, I didn't buy this." Your credit card will generally refund you the amount immediately and open a chargeback investigation, which is difficult for the merchant to win unless they have a signed receipt. The assumption that the cardholder is right is a powerful tool against merchant fraud.

Similarly, the card brands have invested significant resources into the automated detection of fraudulent patterns. If a merchant you visit does make fraudulent charges, or even just sells/gives your card details to someone else, the card brands can pinpoint the source of the leak by correlating fraudulent card usage against common purchase points. That merchant then faces consequences including fines and revocation of card processing privileges.

The whole credit card ecosystem is about providing reassurance and convenience to both cardholders and merchants. In doing so there are trade-offs - such as your card details being re-usable - but the system works well enough to get along.

  • 1
    So its not the bank but the card brand (Visa/mastercard) will take the action? Jun 10, 2020 at 18:14
  • 2
    In the case of a chargeback, your credit card provider (the "issuing bank") will investigate and take action. When a card brand detects fraudulent patterns, they will work with the Processor and the Merchant to investigate the cause, and may issue fines.
    – gowenfawr
    Jun 10, 2020 at 18:19
  • it seems like you are giving your card# to a site or person you don't trust. You might consider an "e-escrow" process for something like that. That's a third party that collects the payment, ensures delivery of product/service, and then pays. Jun 10, 2020 at 18:54
  • @AlwaysConfused privacy.com is another good option; create unique one-time or recurring use card numbers with strict limits as to the amount that can be charged. Uses your bank account as a backend.
    – gowenfawr
    Jun 10, 2020 at 19:09
  • 1
    I suppose the practical takeaways are: if in doubt between credit and debit and bank transfer, always use credit. keep an eye on your statements, report fraud as soon as you find it. report lost or stolen cards as soon as you spot it. you'll be fine.
    – Pedro
    Jun 11, 2020 at 8:47

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .