Card not present is the bane of the ecommerce world. Which is how most fraud is done but it makes it very easy for banks to recover it.