It’s a mechanism that is compulsory in EU (and nearby countries like Switzerland).

When you try to spend money online (without the plastic card), you need a second factor. In practice in, let’s say, Amazon there is an iframe with a page of your bank that asks to confirm the operation on the banking app or insert the code they sent you by SMS or things like that