> what are they doing to secure online payments?

https://en.m.wikipedia.org/wiki/3-D_Secure