I keep a separate debit card account open with Bank of America just for online or over the phone purchases. I transfer money to it only right before using it. About once a year someone makes some type of fradulent purchase on it and BOA always catches it, notifies me, and takes care of it completely. The one thing it does cost is about 30-45 minutes on the phone with the fraud department.