On an online credit card purchase you get a OTP token generated for that transaction? How is it implemented? Do you need to be logged in to your bank to have access to a generator or some kind of app on your phone?
You can get a physical key fob, some new fancy credit cards include a small display and a keypad, or you can get a phone app to generate the token. All are PIN-protected.
Can't login to e-banking without a token, can't do anything inside it without a different token (called APPLI-2 here, whereas the OTP is APPLI-1).