If your organization is under a brute force or "card testing" attack, adding this protection can reduce the amount of fraudulent transactions and stop future attacks.