I recently bought a ticket for an S7 flight between two cities in Russia and paid for it with my Spanish credit card. I did get an SMS with a temporary code to approve transaction, but I thought it's only my bank's settings. UK banks normally use passwords. So probably it's a US-issued cards' issue.