I rather scoffed at CoM's description of FNBO ("Seems like a rinkydink operation"). Till now.
I got a new AGR Mastercard in the mail yesterday. Which puzzled me, because I compared cards carefully, and the account number and the CCV (3-digit security) number and the expiration date were all the same, and the only subtle difference was that the new one said "World."
The mystery was answered today when I got a separate letter from FNBO telling me I was being upgraded to a World Mastercard, whatever that means.
But get this: I wasn't expecting a new card, and there was no requirement for activation. Anybody could've intercepted it and happily racked up charges that I suppose I would've noticed (I get text alerts) but still.
I thought this was shockingly slack security.