Is the two-step authentication required for all payments or is there a minimum price limit?

Certain payment channels and transactions are excluded from 2-factor authentication. Online transactions up to €30 or equivalent local currency won't require two-step authentication from the customer but there is a limit for 5 consecutive transactions or a total of €100. Authentication can always be prompted for other security reasons for any amount.