I only book directly with QR, however as my bank uses password verification (verified by visa) for online use, this is noted on the booking and is never checked. This was explained to me by QR agents after I booked with one card that then expired before I flew.