For me, Verified by Visa asks me for user/pass (static), and a one time password (always different, pick up new list of 200 at bank when I run out), my bank's favoured authentication scheme. Occasionally I also need to enter a code sent via sms. That feature was opt-in though.
For my friend who's with another bank, it asks for the digits displayed on some small plastic keyfob thing with the letters "RSA" on it. The digits seem to change every few minutes.