Just a note. I recently retired from banking. We discouraged our customers from using their debit cards online. Once the bad guys have the #, it is easy for them to continue charging things and it comes straight out of your account. It makes it very hard to dispute. Usually the bank ends up eating it to keep their customers happy. We encouraged our customers to have a credit card just for online purchases. It is much easier to dispute it with the credit card company - they seem to have a lot more clout! The other thing our customers were starting to do was to buy a pre-paid credit card just for online use. That way if someone used the #, there are limited funds attached to the card.