A Personal Identification Number (PIN) is a confidential numeric code — typically 4 to 6 digits — known only to the cardholder, used to authenticate identity and authorise transactions at ATMs, point-of-sale terminals, and certain online payment scenarios, providing a second layer of security beyond possession of the physical card. In India, card PINs are mandatory for all debit card and credit card transactions at ATMs — without the correct PIN, cash cannot be withdrawn even with the physical card present. For point-of-sale transactions at merchant terminals, most Indian banks have transitioned to PIN-based authorisation (chip-and-PIN) for transactions above ₹2,000, replacing the earlier signature-based verification that was more susceptible to fraud. The 3-attempt PIN lockout mechanism — where the card is blocked after three consecutive incorrect PIN entries — provides automatic protection against brute-force guessing of PIN codes. Indian card issuers mandate periodic PIN change and provide secure online and IVR-based PIN generation mechanisms — eliminating the need to visit a branch for PIN setup or reset. For investors and card users, PIN security best practices include: never sharing the PIN with anyone (including bank employees), shielding the keypad when entering the PIN at ATMs or POS terminals, avoiding easily guessable PINs (birth dates, sequential numbers), and immediately reporting a compromised or potentially viewed PIN to the card issuer's 24-hour helpline. A compromised PIN combined with a stolen card enables immediate unauthorised withdrawals until the card is blocked.
For android only
