I believe the redirect to the bank's website is an EU and UK regulation, "Strong Customer Authentication": https://www.theguardian.com/money/2022/mar/14/uk-sho

I believe the redirect to the bank's website is an EU and UK regulation, "Strong Customer Authentication": https://www.theguardian.com/money/2022/mar/14/uk-shoppers-face-more-identity-checks-when-buying-online https://www.theguardian.com/money/2022/mar/14/uk-shoppers-fa... https://www.visa.co.uk/pay-with-visa/changes-in-payment-security.html https://www.visa.co.uk/pay-with-visa/changes-in-payment-secu... I don't know the details of when it is and isn't required. I am asked pretty much all the time for transactions using my Danish cards, and only some of the time for the British cards.