4 ms·
A second factor (like 3-D Secure) is required by EU directive in the whole block for online payments. For in person payments having access to the card and knowi
by Boltgolt 2y ago
A second factor (like 3-D Secure) is required by EU directive in the whole block for online payments. For in person payments having access to the card and knowing the code already satisfies the 2 factors, and checks are extremely rare and have been for decades
- nox101 2y agoSo you sign up for a subscription and every month you must use a 2nd factor to secure it? Do you have amazon or equivalent? Does every time you order you have to second factor or do you just have to do it once when you sign up for an account?
- m1n7 2y agonah you only need to do it once for subscriptions, but you can revoke access. with other purchases it depends on the site. some ask you every time and others don't. i'd assume charges in the same range don't have to be approved again, but idk how it works exactly
- piva00 2y agoSubscriptions don't need to 3-D Secure every transaction, the initial transaction is considered identified and the auth code is re-used for subsequent charges until you revoke it. For Amazon and other larger merchants I feel there is some rules system taking as parameters the merchant size (also as a "trustworthiness" score of sorts), recency of last identified purchase (or even some kind of re-using identified auth codes on that merchant), and amount of purchase since almost all larger purchases I make online seem to require 3-D Secure even on larger merchants. It's not a big hassle, sometimes buying through a new checkout process requires me to authorise the transaction even for small amounts but where I live I can do it through a electronic identification app on my phone, takes some seconds.
- daveoc64 2y agoThe second factor isn't always needed. The banks use the sort of risk factors they do for other kinds of fraud protection. If you make a larger transaction than usual, or try to make a transaction with a merchant you've not used before, then you'll usually be prompted to authenticate. There's also a limit to how many unauthenticated transactions you can make within a period of time.