Credit cards work the same everywhere*, it's not US-specific. My debit card actually only has my bank account number on it (but I think that actually is a Germany-only thing with our Girocards), so paying for stuff online is just a normal bank transfer, where yeah you do have to pass the bank's 2FA (unless it's via SEPA direct debit).

* mostly, my card requires me to confirm some charges in a special phone app, I don't think that's a thing everywhere since it's also fairly recent