Having had my saved card used fraudulently after a password leak I don't store the details in websites and apps now, preferring to use Apple Pay most of the time.
Never had an illicit transaction because someone came into possession of the physical card, the only two I've had were when they got access to the card details via some other method.
Same here. I had a text message from my bank asking me to confirm certain transactions on my account. I responded by phoning the bank who confirmed it was a genuine text. I then established that my card details had been used to buy £400 of groceries and merchandise from two branches of Tesco in Scotland in two separate transactions a few minutes apart. It was flagged up by the fact I’d used the card to obtain money from a cash point in London shortly before the first one was made. I got a full refund. Someone also used my details to obtain goods from Very and the first I knew of it was when I received a letter thanking me for opening an account. I rang customer services and, following the conversation, had another letter confirming fraudulent transactions and that the account had been cancelled and written off.
Separately, I had a message from my credit card provider, “we believe your account may be at risk of fraud so we’ve cancelled your card, new one will be received shortly”. I looked on the app and saw my card listed as lost/stolen and a new card added. New card turned up a few days later.
About five months later the same thing happened again. This time I phoned customer services who said that if Visa/Mastercard are alerted to potential website breaches, they will notify the banks, who then make a decision on cancelling the card and notifying customers. He said he couldn’t say which website was involved, however I had only made three transactions with the replacement card, so I asked was it (company name), he said he couldn’t confirm or deny but the change of tone in his voice told me I was on the right track.
I then went through websites I use(d) regularly and deleted stored payment details. The extra minute or so required to put my card number in every time doesn’t bother me.