I think this is just the PSD2 and customer authentication requirements for collecting prepayments. This has come up in various Europe (and ME) hotel specific threads.
Hilton reservations in Europe: PSD2 may require your card to be authenticated
DoubleTree by Hilton Hotel Madrid-Prado {ESP}