A related tip, given to me by a Capital One rep when my card was compromised: get a second card (which has a different number) that you use just for automatic payments. Then when your “regular” card is compromised by a restaurant, skimmer, or shady online vendor, you don’t have to notify your autopay accounts, since your autopay card is unaffected.