3DSecure is also pretty widely deployed in my neck of Europe (Sweden).

EMV chip transactions and 3DSecure really ought to eliminate the vast majority of "card number stolen" fraud. Too bad it's all so poorly implemented.