Wife got a phone call today from Tesco Mastercard, a couple of online transactions that didn't match her profile (iTunes and a betting site). Nowt to do with us, card now blocked, won't cost us anything, all credit to Tesco for being on the ball. But we're left wondering how the card's got compromised. Who's safe to buy from? The card's only a year old, maybe thirty different places we've given it to, most of them household names like Tesco and Amazon, but a few small local businesses, the garage and shops. So how? One bent member of staff? Can staff get the card number from an owner-present chip & pin transaction? Can staff get the number from an online transaction? Or do crooks just test random numbers at iTunes till one works?