4 ms·

I've never had to authenticate with a bank for using a card? Is this common for you?

by eddd-ddde 3y ago

camhart 3y ago
If the bank fears the charge is fraudulent sometimes I've had to do it. But normally I don't.
- psyclobe 3y ago
  If its the 'verified by visa' thing, it is in fact optional and you can cancel out of the wizard
drxzcl 3y ago
I have a Mastercard branded card issued by the Dutch quasi-monopolist (ICS). Every time I have a transaction with a merchant with ties to NL, they force me to do 2FA using their crappy app. I have no words to express how much I hate this.
sgjohnson 3y ago
Pretty common in Europe these days, due to PSD2 regulation.
JimDabell 3y ago
MFA is required in the EU: https://en.wikipedia.org/wiki/Strong_customer_authentication https://en.wikipedia.org/wiki/Strong_customer_authentication
- eddd-ddde 3y ago
  Really interesting, here in Mexico I think that's unheard of, what I have to use is a digital card with a dynamic 3 digit cvv that's generated on my app.
  - Aerbil313 3y ago
    That’s functionally equivalent.
g-b-r 3y ago
It's 3ds, I don't know if it's because of some regulation but with my current (european) bank it's always compulsory. And a credit card I've got recently also asks for a second code, after the 3ds code.
- g-b-r 3y ago
  By the way, the last time I checked using 3ds means that it's "impossible that the transaction was fraudulent" and thus you can't cancel it
  - tuyiown 3y ago
    Yep, that's why it caught on by shop despite being a friction.
  - kube-system 3y ago
    Yikes, what happens if you've had your devices/credentials stolen? Are you held liable for the transaction without recourse?
    - groestl 3y ago
      What actually happens is with 3DS: a merchant gets liability shift. Liability resides with the issuer then. Whether you as a customer can be held liable for damages depends on your jurisdiction and when you report your devices / credentials stolen.
  - hakfoo 3y ago
    I've heard it presented more as that the merchant isn't on the hook for a chargeback because they did the "best practice" in terms of preventing it.
- tuyiown 3y ago
  > it's always compulsory No, it's the shop that decides actually. More and more accepts do direct payments from card numbers without additional checks, by the way.
- 3y ago
SoftTalker 3y ago
When I use my AMEX card online it sometimes does an extra "validation" step but as I recall I don't have to interact with it. It's probably checking location, etc, and deciding if further validation is necessary. Have never seen that with VISA or MC.
paholg 3y ago
I'm in the US, and for some purchases I have to. There's like an iframe in which I have to log into my credit card account, and approve the transaction. I'm not sure what triggers it.
rootusrootus 3y ago
Years ago I had to do that sometimes, but I haven't gotten prompted to authenticate my credit card with my bank in quite a long time. I thought maybe it just went out of style, but I guess some people still use it.

I've never had to authenticate with a bank for using a card? Is this common for you?

camhart 3y ago

If the bank fears the charge is fraudulent sometimes I've had to do it. But normally I don't.

psyclobe 3y ago
If its the 'verified by visa' thing, it is in fact optional and you can cancel out of the wizard

drxzcl 3y ago

I have a Mastercard branded card issued by the Dutch quasi-monopolist (ICS). Every time I have a transaction with a merchant with ties to NL, they force me to do 2FA using their crappy app. I have no words to express how much I hate this.

sgjohnson 3y ago

Pretty common in Europe these days, due to PSD2 regulation.

JimDabell 3y ago

MFA is required in the EU: https://en.wikipedia.org/wiki/Strong_customer_authentication https://en.wikipedia.org/wiki/Strong_customer_authentication

eddd-ddde 3y ago
Really interesting, here in Mexico I think that's unheard of, what I have to use is a digital card with a dynamic 3 digit cvv that's generated on my app.
- Aerbil313 3y ago
  That’s functionally equivalent.

g-b-r 3y ago

It's 3ds, I don't know if it's because of some regulation but with my current (european) bank it's always compulsory. And a credit card I've got recently also asks for a second code, after the 3ds code.

g-b-r 3y ago
By the way, the last time I checked using 3ds means that it's "impossible that the transaction was fraudulent" and thus you can't cancel it
- tuyiown 3y ago
  Yep, that's why it caught on by shop despite being a friction.
- kube-system 3y ago
  Yikes, what happens if you've had your devices/credentials stolen? Are you held liable for the transaction without recourse?
  - groestl 3y ago
    What actually happens is with 3DS: a merchant gets liability shift. Liability resides with the issuer then. Whether you as a customer can be held liable for damages depends on your jurisdiction and when you report your devices / credentials stolen.
- hakfoo 3y ago
  I've heard it presented more as that the merchant isn't on the hook for a chargeback because they did the "best practice" in terms of preventing it.
tuyiown 3y ago
> it's always compulsory No, it's the shop that decides actually. More and more accepts do direct payments from card numbers without additional checks, by the way.
3y ago

SoftTalker 3y ago

When I use my AMEX card online it sometimes does an extra "validation" step but as I recall I don't have to interact with it. It's probably checking location, etc, and deciding if further validation is necessary. Have never seen that with VISA or MC.

paholg 3y ago

I'm in the US, and for some purchases I have to. There's like an iframe in which I have to log into my credit card account, and approve the transaction. I'm not sure what triggers it.

rootusrootus 3y ago

Years ago I had to do that sometimes, but I haven't gotten prompted to authenticate my credit card with my bank in quite a long time. I thought maybe it just went out of style, but I guess some people still use it.