Same here in my country. It feels so weird that the service provider has the ability to just charge a card in the US if you enter the three things printed on the card. That would cause a lot of frauds if it happened here. Fortunately, the central bank has strict regulations here and we need to authorize a payment by using a password or an OTP.