Threats: - Skimming -> Card + PIN - Card stolen, card lost - Buying Online - Buy contactless - Social Engineering - Terminal manipulation Countermeasures: - PIN + try limit - Tamper resistant terminal - Activating of cards after mail send - 2nd factor with Internet shopping (e.g. BankID) Mitigation: - Withdrawal / payment limit - Block card