Strong authentication is mandatory when the cardholder is present.

Furthermore, since February 2021, the request for 3DS and CVV entry is forced on stores in the PSD2 application area.