I just had my credit card canceled because of fraud. This is actually a perfectly normal occurrence for me, which is the impetus behind this question. The card in question was only about 1.5 years old, because that is how long it has been since my card was last stolen. Over the past decade I would say that I have had my credit card canceled for fraud on average once every 2 years. I think there was once I made it to 3 years, but also at least once where I only made it a year before it was stolen again.

To be clear it isn't being physically stolen and I've never once lost my card. I obviously have no idea how it gets stolen every time (although I'm certainly aware that there are plenty of ways for your card data to be stolen without you knowing). I generally consider myself someone who practices reasonable credit card security. I don't use my card at gas pumps (gas pump skimmers were common in my area for a while), I only use it with major ecommerce vendors online, and I usually use cash at restaurants rather than handing someone my card.

Most people seem surprised that my card gets stolen so often, which makes me wonder if I'm doing something wrong even still. However, I don't actually know if that is the case. Fortunately it isn't more than a nuisance for me when it happens. I've never had to pay for any of the fraud and the bank always sends me a new card with a minimal of hassle. It just "costs" me the inconvenience of being cardless for a week or two and then having to update my credit card details everywhere. Still if there were additional steps I could take to minimize the chance of fraud I would take them to try to stop this from happening so often. So, I realize this is a bit broad, but:

1. Is having my card stolen every 2 years a sign that I am unlucky, doing something wrong, or is it perfectly normal?


2. Are there any other steps I can take to minimize the chances of this happening in another 1-2 years?

A Second card

So far I've had lots of comments about having a second card. That's not a crazy idea, and hasn't really occurred to me. It can certainly help when I'm down a card, although it also has its own disadvantages (one more thing to check every week, one more place to make payments, etc...). Still, while strategies to minimize the inconvenience when my card gets stolen are helpful, I'd rather come up with ways to minimize the chances of my card getting stolen in the first place.

Statistically, one of the e-commerce sites you used your card on was hacked. Once every 2 years is above average for that kind of attack, but not by that much. There's no good way around those types of attacks, other than not saving your credit card details on e-commerce sites.

If you use a Windows computer to do e-commerce on, it would be a good idea to double-check your computer security, though.

No, it's not common to replace your card so often

I'm going to attempt an answer on this one to provide a few steps you can take to minimize your risk of having your credit card number stolen. It sounds like you've taken a few steps already, but there are definitely other ways for scammers to get ahold of your digits.

Shred/burn Paper Credit Card Statements or switch to paperless statements

Considering your statement that scammers are using skimmers at gas pumps, it's probable that they are also dumpster diving for more ways to commit fraud. This is common if you keep your trash can outside and regularly add bags as needed -- and if you take the can to the curb the night before trash day. Completely destroying your statements before disposing of them could reduce your risk substantially. Another option would be to switch to paperless statements (double bonus - saving the environment). Switching to paperless has the added effect of eliminating the chance that someone takes your statement out of your mailbox.

Online Merchant Security

Another potential way for scammers to get your information is to send phishing e-mails that look legitimate. It may have all the hallmarks of an Amazon e-mail asking you to update card information, but it's best to avoid using links at all. If Amazon really wants you to update any information, simply type the address into your web browser and make sure you're on the correct site.

Additionally, it might be wise to get a solid anti-virus program to ensure there are no malicious programs that could be logging your keystrokes. Unlikely, but always a possibility. As another answer mentioned, do avoid public networks if you are doing any shopping from your mobile phone. Best to just disconnect from the WiFi and use a mobile network while you make the purchase.

Get an RFID blocking wallet

As I mentioned in my comment, it's possible for a scammer to walk up behind you in the mall and scan your card from your back pocket without you even knowing. You can purchase a specially designed wallet that will block these types of scanners and prevent your numbers from being stolen.

Personally, I've carried 4 different cards for the better part of 5 years and the only reason I've needed to replace them is that they get worn down and unusable -- and I live in a fairly large city. Having to replace your card for fraud this often speaks to some very determined scammers in your area or particularly bad luck. A few small changes could increase your odds of keeping the same card longer.

My immediate reaction is that your account(s) is compromised. Do you have an easy to guess password? Change it. Turn on multi-factor authentication if your bank offers it. Check your "last visited" note every time you log in (if the bank doesn't offer this, change to a bank that does). If you don't bank online, immediately call your bank and see if someone opened an online account for you. You might want to quietly observe your mailbox and see if people are snooping.

Instead of just sending you a new card, your bank should be changing your account numbers, changing your login id and such.

Other steps: If you do anything requiring login from public wifi, stop that. Make sure your "major ecommerce vendors" are in fact the real address, and you haven't been using a front the entire time. As mentioned in the comments, consider separate cards for things like your online purchase, automatic billing and everyday use and only carry the everyday use one around. Consider a RFID-shielded wallet.