HRoth - 9:31 pm on Sep 14, 2011 (gmt 0)

You don't need a PIN to use a debit card online. I have never seen it. PIN is only for card-present swipes in brick-and-mortar stores. And a lot of debit cards these days can be processed as a credit card in a brick-and-mortar shop as well. The only time you have to have a PIN is when you are getting money back. I use my debit card as a credit card at the gas station all the time so they don't authorize a ridiculous amount. This story seems very believable to me, because I have had customers who have experienced it, and I myself have seen my debit card--that's right, DEBIT CARD--number ripped off more than five times, most likely from payment gateways incursions, the big secret no one wants to talk about. I check my bank account every day, so I would see pending charges almost invariably from that idiotune store. Then I have to call the bank and they have to cancel the card. Any transaction that is captured after the bank cancels the card does not get paid.