To steal data from my plastic card, is it enough to spy on its number, expiration date and CVC code? and that's it?

Question

Payment cards

If a pin code is required to withdraw money from an ATM, then in the case of an online purchase, it is enough to have only the information that is openly written on the card: a 16-digit number, expiration date (4 digits) and a 3-digit CVC / CVV code. Is this information enough to empty my account? Am I confusing anything?
And how to protect yourself from such theft? Even when paying with a card in a store, nothing prevents the cashier from remembering these 23 numbers. And yes, they are easy to see. And a person who remembers this data can use the card not immediately, but after a few months. As a result, it turns out that if at least once I took out a card from my wallet somewhere in a public place, then at any moment I can lose money. What nonsense? Or am I not understanding something?
Please clarify the situation. Thank you.

Answer 1

Yes, the number
of the expiration date and the cvv code is enough,
everything else is not even checked,
you can specify a different address,
you can specify a different last name and first name, and the payment will still go
through two-factor authorization through the visa and mastercard buns, but in stores that do not support this, this will not help a
full description how to protect your cards and why you need to remove the cvv code from the card
pumainthailand.com/zashhishhaem-svoi-bankovskie-ka...

Answer 2

Many billing companies and banks use MCSC and VBV. Also all sorts of TAN codes and readers for payments. If you want at least some kind of protection, then make exactly the card and in the bank that supports these technologies. Also, do not forget that now almost all AVS banks, i.e. For payment, you must use the correct address of the cardholder.
But in general, you are right if the billing and the bank do not use any protection. Then only the card number, exp date and cvc are enough for payment.
And so article 9 of the law on PS, in particular clause 15, is on the side of the deceived client.

Answer 3

In fact, only a number is enough (some stores do not need anything other than a number).
Another issue is that transactions without two-factor authorization (by SMS or codes on a separate card) in the bank are easily disputed and the money is returned.

Answer 4

Erase the CVV to hell. Or paint with black marker. But write down somewhere first (can be encrypted).
Scrape gently with a knife. Then, with a black marker for glass, paint over several layers.