Sadly you are correct.
Just last week a fellow co-worker and close friend of mine was buying Xmas presents for his grandkids via internet. He was using his banking/debit card online for the purchases. This was on a Friday. The following Monday he checked the status of his bank account and he was
negative 166 dollars.
Over the weekend someone had stolen his identity and clean out thousands of dollars from his account and the bank didnt even catch it.
I first hand witnessed the emotional stress this person was going through for the past week. It was a very sad deal.
Luckily, the the criminal scumb bag wasnt so smart, he made a large purchase for a small dirt bike and the company he ordered it from wouldnt deliver the package to the person who ordered it they would only send it to the name on the card holder. So they sent the dirt bike to my friends home address with all the criminals information: Name, address, email, and phone number.
So he turned it over to the police and order was restored. Just yesterday the bank returned all the stolen money to his account and he's a happy man again and his grandkids will have a Merry Xmas.
Moral of this very true story, be very careful with you bank information when purchasing items for you loved ones.
Have a safe and Merry Christmas !