A computer-implemented method, comprising: receiving, by a web browser executing on a processor of a device, selection of a link in a merchant web page, the merchant web page associated with a transaction; downloading, by an operating system (OS) executing on the processor, an application from an application server based on the link; identifying, by the application, a plurality of financial institution applications installed on the device; selecting, by the application, a first financial institution corresponding to a first financial institution application of the plurality of financial institution applications installed on the device; receiving, by the application, an identifier; transmitting, by the application, the identifier to an authentication server of the first financial institution to generate a one-time passcode, OTP, and send the OTP to a phone number associated with the identifier; receiving, by the application, an input value; based on the input value matching the OTP, outputting, by the application, an indication to tap a contactless card associated with the first financial institution to the device; instructing, by the application, the contactless card to generate encrypted data; receiving, by the application, the encrypted data from the contactless card; transmitting, by the application, the encrypted data to the authentication server of the first financial institution; receiving, by the application, an authentication result specifying the authentication server decrypted the encrypted data; receiving, by the web browser based on the decryption of the encrypted data by the authentication server, an account number, an expiration date associated with the account number, and a card verification value (CVV) associated with the account number; and providing, by the web browser, the account number, the expiration date, and the CVV to a server associated with the application to process the transaction. receiving, by a web browser executing on a processor of a device, selection of a link in a merchant web page, the merchant web page associated with a transaction; downloading, by an operating system (OS) executing on the processor, an application from an application server based on the link; identifying, by the application, a plurality of financial institution applications installed on the device; selecting, by the application, a first financial institution corresponding to a first financial institution application of the plurality of financial institution applications installed on the device; receiving, by the application, an identifier; transmitting, by the application, the identifier to an authentication server of the first financial institution to generate a one-time passcode, OTP, and send the OTP to a phone number associated with the identifier; receiving, by the application, an input value; based on the input value matching the OTP, outputting, by the application, an indication to tap a contactless card associated with the first financial institution to the device; instructing, by the application, the contactless card to generate encrypted data; receiving, by the application, the encrypted data from the contactless card; transmitting, by the application, the encrypted data to the authentication server of the first financial institution; receiving, by the application, an authentication result specifying the authentication server decrypted the encrypted data; receiving, by the web browser based on the decryption of the encrypted data by the authentication server, an account number, an expiration date associated with the account number, and a card verification value (CVV) associated with the account number; and providing, by the web browser, the account number, the expiration date, and the CVV to a server associated with the application to process the transaction. <EOS>