New airline tkt Scam - Beware

Indeed a sophisticated fraud Wazza & most worrying.
I am rather surprised that it works though. In the UK now when you try & pay for anything on line with a card you have to type in a new alpha/numeric sequence before the card will be accepted. This is a little like a pin number - but minimum 8 digits long & alpha numeric. You have to have your card 'registered' with the bank first. You do not type this into the site you are buying from, but into the bank verification window that automatically opens. That then is the Bank authorisation to enable payment.
I do understand that thieves are ever more cunning in cheating people out of their cash, but it does have to get to the point where it is so expensive for them to do this that the rewards just do not warrant it. I hope...