My wife has recently been the victim of card fraud - in this case someone has evidently got hold of her debit card details and used them to order £1200 worth of computer equipment online. She's very careful about shredding statements (more careful than I am, to be honest) and is reluctant to hand over her card in restaurants etc. In fact she has never even used this particular card to shop online either, although it is registered with PayPal.
Can anyone tell me the commonest methods used by fraudsters to steal credit card details, and offer suggestions to prevent "cardholder not present" fraud? Or is there something more sinister going that gives us no chance of preventing fraud, such as selling card details?