Banks increasingly require shoppers to provide an extra form of verification when they buy online.