Sounds like they require one to authorize it by email or something when one or someone attempts to buy something. Sounds okay but nothing is real secure when you add the other factors into the spiel....