Credit cards don't do jack shit for fraud protection. They simply market it as 0-fraud liability and the rest of the participating parties eat the costs (at least for online transactions and pre-chip days). Before there were chips, guess who got hit with the loss if fraud happened on a card? It was the merchant. For online transactions, merchants are still hit with the loss since the chip is not used. If you want actual fraud protection features you have to pay extra for products like Stripe radar or Siftscience. With chip finally some fraud liability shifted to the merchants, but partially because it's pretty much impossible to clone a chip card.