Credit cards as a while use a security model from...what, the 1970s? Sure, they've patched by adding the 3-digit CVC, but really? A huge industry can't do better than that? Honestly, it's pathetic...
BBVA has dynamic CVC
https://en.wikipedia.org/wiki/3-D_Secure
BBVA has dynamic CVC