Think about what a card number actually is. A string of digits that, combined with an expiry date and three more digits printed next to it, lets whoever has them take money from your account.
Now think about how many organisations you have given that to. Every online shop, every takeaway, every hotel, every subscription you cancelled years ago. Each of them stored it somewhere, on systems of varying quality, defended by people of varying competence.
It is a shared secret that stops being secret the moment you use it, and the only way to stop using it is to stop buying things.
This is why the fraud industry exists
Not because anyone broke into your bank. Because a company you bought a lamp from in 2019 was breached, and your details were in the file.
Everything built on top — the fraud detection, the text messages asking whether that was you, the blocked card on holiday, the whole apparatus — exists to compensate for a design where the credential to spend your money is copied to every merchant who wants payment.
The industry treats fraud as a problem to be detected. It is really a consequence of handing out the key.
What a direct payment gives away
Nothing that can be reused.
You approve a specific payment, for a specific amount, once, on your own device, with your face or your fingerprint. The shop receives money. They do not receive anything that lets them take money again, and there is nothing in their systems for a breach to expose.
- No number to storeA breach at a shop you used cannot cost you anything, because they hold nothing of yours.
- No recurring authority by accidentNothing continues charging you because it was easier to keep the details on file than to ask again.
- Nothing to be phishedThere is no number to be tricked into typing into a convincing page, because there is no number.
- Approval per paymentEach one is a deliberate act rather than a standing permission you granted once.
The honest comparison
Cards do give you something in return, and it is worth being straight about it.
If your card details are stolen, you are generally made whole. The bank absorbs it, and that protection is real and valuable. A direct payment has no equivalent: approve one by mistake and it is gone.
So the trade is protection after the fact versus nothing to steal in the first place. Cards protect you from the consequences of a risk they created. This removes the risk and gives you no safety net. Neither is simply better; they fail in different directions.
Where the risk moves to
To you, and to your attention at the moment of paying.
Nobody can take money from you without your approval, so the only way to lose it is to approve something you should not have. That makes the defence simple — read the amount, know who you are paying, never give your recovery phrase to anybody — but it does mean the defence is yours rather than a fraud department's.
Which, when you think about how much of your financial life currently depends on strangers keeping a number safe, is not obviously the worse arrangement.
Ceodore never holds your card details, because there are none. We never hold your money either.