Security is as much about user practices

https://www.bbc.co.uk/news/business-53272411

Non-tech savvy people enabling those that don't understand or care about costs. Frankly I'm amazed that a game can entice or encourage more spending during the game without throwing up password prompts or warnings (if it does, I'm inclined to let the old guy learn from it by not getting a refund).

Ho hum.

Steve admits that he didn't read the terms and conditions of the sale when he allowed his [11yo] daughter to initially spend £4.99 on his debit card.

The mind boggles

I would be concerned about the game provided holding all of his details and never going back for reauthorisation.

In reply to a post by MHC:

I would be concerned about the game provided holding all of his details and never going back for reauthorisation.

Its billed through Google Play, so I would have thought this is a Google Play issue as well as the credit/debit card. A good reason to not use debit cards online, if you have a credit card over £100 you get more protection.

I have cards registered with a few places - Waitrose, and AMEX as two examples, however they always ask for a CVV number for each transaction. Does the £100 figure only come into play on a single transaction though?

Very good question. I know I don't need to input CVV value to buy from Google Play or Apple's App Store, but then most purchases are under £10 !

In reply to a post by MHC:

Does the £100 figure only come into play on a single transaction though?

Not necessarily. It's the value of the goods/services you're buying that is key - not the amount paid on the card.

The item or service you bought must have cost over £100 and not more than £30,000. You don't have to have paid the full amount on your credit card – the card company is liable even if you made only part of the payment (a deposit, say) on your card.