You sign into your bank / verify the transaction with the financial institution directly and when you do so it’s reported back to the merchant/seller. I.e. not only does this person have the card number, expiration date, CVV, and address – but they actually verified directly with the bank that this is a legitimate transaction.
