The main reason why CNP fraud is still possible is because even EMV cards happily 'leak' PAN data in clear to POS. That data can be stollen and abused ... behavioural analysis can help for sure, but it is not the only answer. Leakage of the sensitive card data to merchant infrastructure must be stopped at the source. There are several ways to accomplish that

a) P2PE - but that is too dependent on merchant's participation, also locks them into a particular acquirer so unfortunately it did not take off

b) E2E-FPE - if adopted by payment schemes can be the solution https://www.linkedin.com/pulse/extending-emv-protect-sensitive-card-data-pan-milos-dunjic?trk=mp-reader-card

c) ProxyEMVPay cards - http://letstalkpayments.com/enable-tokenization-physical-payment-cards/ ... can enable cost effective 'card present like' online EMV payments via OnlineEMVPay http://letstalkpayments.com/onlineemvpay-using-proxyemvpay-cards-secure-app-online-payments/