With a UK card pretty much any transaction I do online requires me to Auth it in app.

I even found I had to do it recently for things like car hire, and those websites are generally just wrappers around local company searches (though higher sums overall).