I always used my debit card until my last vacation.
I had used the debit card in Orlando, Pensacola and Alabama to pay for my gas. I came home and the first night ordered pizza and paid with the debit card.
The next morning at 7 am my phone rang and it was someone from the main office of the bank asking if I had used my card in Las Vegas the night before. The noticed that I had pizza in CT and 3 hours later tried to buy $3,000 worth of merchandise at the
Walmart in Las Vegas. Luckily they refused the charge and I cancelled my card immediatly. What really got me upset is that they knew my password.
the bank said they most often get the information from gas pumps. They insert some kind of thing that will allow the gas charge to go through while reading the card and password. They then just make a new card on machines they have and either sell the card or charge stuff themselves.