On 2 Oct 2009, at 14:18, Bob Walker wrote: > In my experience sites are forced to by their bank. That's unusual. Banks usually don't care, but they will give liability to the retailer in case of fraud on non-3ds transactions. --James