It pre-fills a text message which you can send to authenticate yourself. If you don't have a saved card, you're prompted to enter one via a web url.