吓尿了3D Secure取决于商家的设置，不是必有的。
ashford.com那个citibank没有approve，所以没有短信通知，没有在pending或unbilled下面。
borderfree那个citibank approve了，所以有短信通知，在你的bill里面。
连续发生的话，是不是有一个有你信用卡资料的公司被hacked了？
在这个网站输入你的常用电邮，看看你有没有被波及（打开这个网站之前，先参考这个文章https://www.forbes.com/sites/adamtanner/2014/04/14/these-sites-tell-which-of-your-accounts-have-been-hacked再决定以防这个网站钓鱼）：
https://haveibeenpwned.com/
刚刚查了 https://haveibeenpwned.com/
Oh no — pwned!
Pwned on 1 breached site and found no pastes (subscribe to search sensitive breaches)
Dropbox: In mid-2012, Dropbox suffered a data breach which exposed the stored credentials of tens of millions of their customers. In August 2016, they forced password resets for customers they believed may be at risk. A large volume of data totalling over 68 million records was subsequently traded online and included email addresses and salted hashes of passwords (half of them SHA1, half of them bcrypt).
Compromised data: Email addresses, Passwords
不过说的是DropBox，我是注册过一个，本来想存点什么东西的，可是后来没有，一直用的自己的移动硬盘。而且注册的时候也没有需要提供关于银行卡的私人资料
Pwned on 1 breached site and found no pastes (subscribe to search sensitive breaches)
Dropbox: In mid-2012, Dropbox suffered a data breach which exposed the stored credentials of tens of millions of their customers. In August 2016, they forced password resets for customers they believed may be at risk. A large volume of data totalling over 68 million records was subsequently traded online and included email addresses and salted hashes of passwords (half of them SHA1, half of them bcrypt).
Compromised data: Email addresses, Passwords
不过说的是DropBox，我是注册过一个，本来想存点什么东西的，可是后来没有，一直用的自己的移动硬盘。而且注册的时候也没有需要提供关于银行卡的私人资料
Huasing Association 1999 - 2013