Because the card number, the cardholder's name (hanyu pinyin), the validity period of the card and the CVV2 behind the card have been discovered by others, they can be used overseas. Because there is no need to verify the password overseas. Or your card is cloned and used overseas, and you don't need a password.

Theoretically, the authentication function provided by many international card organizations is entirely to cater to the idea that passwords are safer in China. In fact, most of them are just verification of payment merchants, such as shopping on overseas websites. What is really safe is chip card and contactless card.

Of course, it is also possible that a liar sent you a text message.