[AnthonyMouse]

The average normal user would go months to years between needing to update payment info, so why would that require them to solve puzzles 10 times a day?

That is also notably a completely unnecessary dumpster fire created by the credit card companies. Hey guys, how about an API that will request the credit card company to send a text/email to the cardholder asking them to confirm they want to make a payment to Your Company, and then let your company know in real time whether they said yes? Use that once when they first add the card and you're not going to be a very useful service for card testing.

[CamouflagedKiwi]

Isn't that basically 3DSecure / Verified by Visa?

[AnthonyMouse]

It's what those things should have been.

What you need is for all card issuers to be required to implement it by the network. Otherwise you'll still have people showing up to test all the cards that don't support it and the payment processors would still kick you off for that.