> So there are a couple of issues at play here. First, a merchant can charge your account with only your card number, date and CVV But the 2FA authentication o

> So there are a couple of issues at play here. First, a merchant can charge your account with only your card number, date and CVV But the 2FA authentication of 3D secure with an SMS was fine(-ish) for me. I'd prefer this didn't rely on a phone (having network reception), but fine. It's better and more conforting than no verification at all. Requiring me to validate two different forms with both an SMS and my bank account password is a bit much. But I'll adapt. I wish they turned those two forms into one directly though.