This is how most ecommerce works in Lithuania too. Debit cards (vs credit cards) typically didn't allow online transactions until last year, so most ecommerce c

This is how most ecommerce works in Lithuania too. Debit cards (vs credit cards) typically didn't allow online transactions until last year, so most ecommerce companies just do this - there are only 3 or 4 major banks, so for the user it's pretty easy. I assume the fees are lower for the business too. The only downside is if you don't have a local bank account (i.e. as a foreigner) you can't use it. 2FA is done by a) paper code b) passcode generator fob or c) mobile signature, which uses your SIM which holds an RSA key (it doesn't use SMS): https://en.m.wikipedia.org/wiki/Mobile_signature https://en.m.wikipedia.org/wiki/Mobile_signature