email football and security

I tried asking this question to my private banker, but it appears other than passing the email around ABSA with irrelevant answers and many reminders they are incapable of answering it. Could you please advise why when I want to make a payment with i-PAY on TAKALOT (a company that I frequently purchase from using i-PAY), AFTER I log into my bank account I get sent a RVN and a TVN to complete the payment, however when I make an online payment with my credit card there is absolutely no security check. In my opinion this is the wrong way around. With i-PAY I have to sign into my ABSA bank account and use my password surely this is enough to confirm that it is me, whereas with my credit card there are many ways for ******** and hackers to get credit card details and as there is no security check this can easily be used without my knowledge. I would appreciate it if you could explain the reason for this.