To be fair to bmi, it could well not be them: VBV and Securecode rely on the availability of VISA/Mastercard directory servers and the relevant servers at your issuing bank (i.e. MBNA).
Any one of these goes byebyes and it's game over.....not great timeout/error handling though.
I'm not signed up to any of it. As the issuer takes the hit for fraudulent use of my card why add grief to your life? It's for their benefit not yours.