In Denmark i currently have to enter my card details but then, i get a popup where i have to enter my government issued ID username and scan a QR code from the related app (or enter from a 2fa token generator)

Its annoying - but it feels quite secure