Credit card fraud can seem rampant, with almost daily reports on consumers’ identity being stolen or hacked.

Credit and debit card fraud totaled $4.5 billion in 2016, though new computer chips on cards are expected to help drop that to $1 billion in 2020, according to a report by iovation, a provider of digital intelligence for fraud prevention.

With all of the talk about credit card information being stolen, you may forget about another plastic card in your wallet or purse that’s a lot more enticing for thieves — a debit card.

A debit card is one of the worst ways to use your money if you want your ID protected for two main reasons.

First, it’s linked directly to your bank account, so anyone with your card information can instantly withdraw all of the money from your account. Second, debit cards don’t have near the amount of protections that credit cards do for consumers.

Debit card hassles

A debit card is a smart way to avoid one of the top headaches that can come with using a credit card — paying interest on the balance if you don’t pay the bill in full every month. Debit cards pull money directly out of your bank account, while credit cards advance you money for a month on purchases, up to a credit limit.

A debit card allows you to only spend what you have. A credit card can allow you to sink into debt.

While a debit card can be seen as safer than carrying cash, it can be more costly if a thief steals it or your personal information to use your debit card to empty your bank account.

If your credit card is lost or stolen, or the information on it is stolen, you can’t lose more than $50 in unauthorized transactions. The same is true for an ATM or debit card if you report it within two business days, according to the Federal Trade Commission. You won’t be responsible for any unauthorized withdrawals if you report the card missing before someone uses it without your permission. That’s the good news.

But it can get much worse with a debit or ATM card, the FTC says, if unauthorized use happens before you report it.

If you report a debit card loss within 60 days after your statement is mailed to you, you could lose up to $500 in unauthorized transfers. If you don’t report it within 60 days, you risk unlimited loss. You could lose all of the money in that account and the unused portion of your maximum line of credit for overdrafts. The thieves could overdraft your account if you wait more than two months to report it.

Once you report the loss or theft of your debit card to the card issuer, you’re not responsible for additional unauthorized use.

Credit card protections

If your credit card or credit card number is stolen, federal law offers a simple protection: You’re liable for up to $50 in authorized transactions. That comes with one important caveat — you must report it to your credit card issuer.

Some issuers won’t charge you the $50, and are vigilant about being on the lookout for fraud and alerting customers when they see potential credit card fraud.

How your information is stolen

In addition to data hacks such as at Uber and elsewhere that should have consumers worried about their personal information being used by thieves, criminals can hide skimmer devices inside gas station pumps to steal credit and debit card information.

When using a debit card, which can also be used at an ATM to withdraw cash from your bank account, use bank-affiliated ATMs. They have a higher level of security than independent ATMS at gas stations or other businesses. Be sure to cover the keypad when entering your information.

Shred your bank and credit card statements so that thieves can’t pull your data from your trash can, and check your accounts and statements daily to make sure all of the transactions are legitimate.

More ways to protect yourself

If you can limit yourself to only spending as much as you can afford, then only use a credit card and put your debit card away. Only use your debit card for cash withdrawals, since a debit card offers much less financial protections than a credit card if stolen.

Don’t open emails that come from someone or a site you don’t know or already do business with. Phishing emails often use a phony website to lure victims to give up their card or bank account numbers, so never give such information to anyone who asks for it that you don’t trust.

Sign up for fraud alerts from your bank and credit card company. If you think you’ve been the victim of identity theft, institute a credit freeze to prevent anyone from opening a new account in your name.