Wow. This is entirely different here in India. First of all, it has been made mandatory (it's slightly inconvenient). This is not implemented as a popup. It redirects to the Issuing Bank's website for verification. Signup should be done in the bank's site as well (e.g.: https://www.3dsecure.icicibank.com/ACSWeb/EnrollWeb/ICICIBan...).