That's why 3D secure exists: https://en.wikipedia.org/wiki/3-D_Secure
Blame your government for not caring enough to have it implemented
Blame your government for not caring enough to have it implemented
Then there's a bit of a monopoly with 3d secure implementation by cardinal.js and their solution falls down completely if you have a decent amount of traffic on the site (I have worked on flash sales websites, cardinal js is about as reliable as I can throw my car)