Most payment gateaways in USA support 3d 2.0 system (like stripe) which means that they will push OTP depending on your "fraudscore" this fraudscore is counted by bad ip quality, wrong info on checkout, wrong ip location, shipping adress too far away from CH etc, thus letting you skip to the 2d gate.