Therein lies the rub. The merchant takes on 100% of the liability, the credit card companies and banks lose NOTHING when a fraudulent charge is made. In fact, they get to collect a chargeback fee. They have little incentive to fix the problem. Merchants, of course, have incentive to fix the problem. But they have no power (other than the really big merchants) to effect change.

It's very, very common for a purchase to be shipped to an address that is not the billing address. There's the obvious, like holiday gifts, and the less obvious, like small business owners with a home billing address wanting items shipped to their business. Merchants are forced into a corner here, because they'll lose the sale if they decline the transaction, and the credit card companies provide no tools to assist in determining fraudulent intent.

What's your list of "not shit" languages?

Thingamy seems to have a similar goal, but appears to be targeted only for large user base purchases. Sad, as the background material seems well thought out. http://www.thingamy.com/