Whenever you place an order with a credit or debit card issued in the European Economic Area (EEA), you may be requested to verify the transaction with your bank via a pop-up box or separate web page asking for:

  • Something only you know (e.g. password)
  • Something only you can access (e.g. one-time SMS code)
  • Something only you have (e.g. fingerprint)

This two-factor authentication adds an extra layer of security to your online purchases, and is required by the PSD2 or Strong Customer Authentication directive. This regulation applies to all transactions made with cards issued in the EEA.

The extra authentication is set up, controlled, and approved by your bank, not by Blizzard. If you have any issues with the authentication process, please contact your bank.