Your card isn’t connected to the Internet on its own, but your smartphone is always connected -- and that means card payment on a smartphone can be compromised