It is with the risk rules. If a transaction is considered risky due to amount, location, customer pattern etc, Stripe/ issuer would need more details to lower the riak during Authorization