I have always heard that the 2fa verification really depended on the vendor actually doing that auth so I always scrape the 3 verification number (what is it for anyways ?) at the back of my card. It's just 3 numbers after all.
It's mandatory by law, and it's additionally to the 3 numbers at the back of the card.
Usually it works by confirming or denying the transaction on the App of your Issuing bank
