Consumer and Merchants are both the victims. You have multi-billion dollar companies passing losses on to consumers and merchants. That is not risk, that is a difference between right and wrong.

If the credit card companies are going to verify all the information, then they need to stand behind it. DAta theft at the credit card company is their own fault, and they should be given a free pass and allow the losses to be passed to consumers and merchants.