Authentication includes determining that a cardholder payment account is associated with a mobile device. Authentication includes receiving an indication of physical possession of a payment card. Authentication includes receiving a purchase request for an authorization of an exchange of funds from the cardholder account to the merchant. Authentication includes receiving a randomized transaction identifier to the request for the authorization of the exchange. Authentication includes transmitting to the mobile device, information associated with the request. Authentication includes transmitting to the mobile device, a request for confirmation of the authorization from the cardholder from the account of the cardholder to the merchant. Authentication includes receiving an indication, facilitated by the cardholder, that the exchange is authorized. Authentication includes authorizing the exchange of from the payment account of the cardholder to the merchant.