It is shameful that a company with the Disney brand would be so lame when it comes to implementing the most basic and common anti-fraud best practices and then be so greedy as to refuse a charge back even after they acknowledge fraud!!!
I am not a customer and never was. My credit card was fraudulently used to order movies. When I realized fraud had taken place from my cc statement, I called the Movie Club who immediately acknowledged the transaction had already been identified as fraudulent. The support rep could not find any trace of me in their system (based on name and address) though my cc was in their database. He told me the person the movies were shipped to had reported he had never ordered the movies and had returned them. I mistakenly assumed that meant they were going to credit my card back! Silly me!
I reported the issue to my credit card issuer who reverted the charge. Soon, thereafter, my bank told me The Disney Movie Club was rejecting the charge back. I called The Disney Movie Club again to better understand their cc practices. They said that they check that the bill to and ship addresses to are the same. But, clearly, they do not use any other common rules for identifying credit card fraud like checking the bill address to with the address on record with your bank or something as simple as IP geolocation to find out if the IP of the person ordering is in the same city as the bill to or ship to.
To make matters worse, they charged me a second time when they had already identified that the cc had been used once fraudulently 3 weeks before. One would think that the cc would have been flagged!! No! If it goes through, they just take the money and run and refuse the charge back!!! Needless to say I changed my cc altogether and pressed my bank to fight them on both charges.
I do not want to even know how they protect credit card numbers and there is absolutely no way I would ever consider ordering anything from them. Be careful that the Disney name does not mean secure!!