It's worth noting that the mere _existence_ of a debit card on a checking account still opens a fraud vector, even if you never use it. If the physical card is stolen, or the bank has a security breach where the number is obtained, those are both enough information to make fraudulent transactions. Of course, using a debit card will greatly enlarge the attack surface, but not using it does not make you immune.
Back before the "cvv" number on the back of the card you could download a bit of software of the net that would generate random account numbers with valid ICA/BIN and check digit. You just picked the name of the bank you wanted the card to appear to be from.
