they do 100%. back in June i got charged $30,000 by a fake "home depot". I disputed the charge, but that wasn't fun. the cs reps told me it was not through a debit card but via acct+routing number which got leaked somehow.