Hacker News Reader

In Europe your liability for Card Misuse is capped at 50€ for things that happened before you blocked it.

Also how would someone misuse it? You need a PIN Code for every transaction anyway, and the EMV Chip can't be cloned like Magstripes.

Online Payments need a mandatory 2 Factor Authentication

View on HN

I have always heard that the 2fa verification really depended on the vendor actually doing that auth so I always scrape the 3 verification number (what is it for anyways ?) at the back of my card. It's just 3 numbers after all.

It's mandatory by law, and it's additionally to the 3 numbers at the back of the card. Usually it works by confirming or denying the transaction on the App of your Issuing bank

None of the eu amazons have 2fa on their card transactions.

Why do they say otherwise on their own website?

https://www.amazon.de/b?ie=UTF8&node=17666138031

Well I have bo idea. All I know is when I purchase on either .de, .co.uk or .ie the transaction goes through immediately. I have 3D secure enabled.

The text on that link of yours is sneaky though:

"...you MAY be asked to..." (Emphasis mine)

Because you can add them to a "That Store is safe" list, and you won't get asked again. You probably did this at some point

They recently enabled 3DS for business accounts, on customer ones it’s indeed still disabled

Reply on news.ycombinator.com