A site using credit card verification in Tennessee isn't complying with the law, and the operators are risking a Class C felony conviction. They are also risking being dropped by their payment processors.
TN has specific rules about how someone can be verified, and possessing a credit card isn't a method that complies. It also requires that the verification is repeated every session, or every 60 minutes, whichever is sooner.
Legal action for AV non-compliance is happening, both against website operators, and the PSPs who process payments for them.
