Right when you thought security couldn't get any worse

This blog will be short and sweet because a few images say it all.

I've spent a lot of time trying to educate people on being careful with credentials. It really doesn't help when I try to place a purchase with a "legitimate" supplier, and, after handing over valid credit card details, I get this:

Not only is it not a troll, it's well documented in their FAQ:

The frustrating part is not that they do this. It's that they apply the charge to your card a day before giving you this prompt, leaving you begging for refunds when you refuse.

Yes, I've spoken to them. They don't see an issue. Yes, mwave thinking requesting your bank login credentials is just a normal thing.

Addenum

Despite promises to keep this short, here are a few additions I'm compelled to add: