It seems on some websites, and sometimes just for higher value transactions, the merchant requires your bank verify that it really is you when making a payment from a credit card.
Some banks do this by sending a 6 digit number to your mobile phone (if you've one registered with your bank) by SMS for you to enter into the vendor's website when making a payment.
Other banks throw questions at you on the vendor's website that only you should know the answer to, like what's your mother's maiden name and where did you go to school.
Which bank are you with and how are higher value credit card transactions verified? Code sent via SMS? Personal questions? Does your app have a pop up notification? Something else?
Which bank in Australia that compatible/ support yubikey? I guess none….