In reply to Shane Speering.

Welcome to the plight of small merchants everywhere. Apple is not immune nor could they have they done anything to prevent it. The bank has no way of knowing if the card info has been compromised until it is used. At least with an online purchase, the merchant has some data to help them determine the risk level of the transaction. This data is not available in an NFC type transaction, which is why Apple Pay, Google Wallet, Samsung Pay, etc will never be as secure as a card-present or online purchase transaction.