Comment by jokethrowaway

If each card were a public/private keypair, you could sign a message authorising a payment of X amount at current time, in zero knowledge, without leaking your secret (the credit card number) in every transaction.

Add two factor authentication, if you want, but fix the underlying giant issue first.