I never use debit cards. I only use credit cards. This way, if someone does get my account number... and charges $1 million, by federal law, my liability is zero.