Or they could just require 3d secure which iirc lets them say "you did 2fa when ...

easrng on Sept 30, 2022 | parent | context | favorite | on: Why “go nuts, show nuts” doesn’t work in 2022

Or they could just require 3d secure which iirc lets them say "you did 2fa when you purchased, we know this wasn't a fraudulent transaction, fuck off."