I find it's hit or miss with some cards/merchants (although can speak for CX since I haven't booked directly with them for a while). Anyway, I find the online verification to be a bit of a joke, since with my hk HSBC MasterCard it only ever asks for "security" details such as hkid and birthday that any competent identity thief/fraudster would know already anyway.