Strong Customer Authentication should be sufficient to prove that the payment request is authorised by the card holder, given this I'm not sure why a business would pay to be sure there's a human there?