I used a savings card, not a credit card. My friend logged into his Qunar.com account, used my savings card, filled in the mobile phone number reserved by my bank, and then issued the ticket directly. No verification code was sent to the reserved mobile phone number for verification. This loophole is too big!