A personal identification number is a secret numeric credential used to verify a customer or cardholder for ATM, debit-card, banking, and other transactions.
A personal identification number (PIN) is a secret numeric credential used to verify a customer or cardholder for ATM, debit-card, chip-card, telephone-banking, and other electronic transactions. A PIN is evidence used in authentication; it is not proof by itself that the account holder authorized a particular transfer.
PIN security depends on how the number is issued, entered, encrypted, verified, reset, monitored, and protected together with the card, device, or account it controls.
| Context | What the PIN helps verify | Other evidence still needed |
|---|---|---|
| ATM withdrawal | Person presenting an activated card or access device | Card data, ATM log, amount, camera or device evidence, authorization, and account posting |
| Debit-card purchase | Cardholder-verification step for a payment | Entry mode, chip or stripe data, issuer response, merchant record, and settlement |
| Chip and PIN | Cardholder verification during an EMV transaction | Chip authentication, terminal data, authorization, and capture |
| Telephone or digital banking | User access to an account or service | Device, session, transaction, and risk-monitoring evidence |
| Device unlock or wallet payment | User verification on the consumer device | Wallet credential, token, device result, issuer response, and payment record |
The same digits should not be assumed to serve all these roles. A card PIN, telephone-banking PIN, and device passcode can be separate credentials governed by different controls.
The user enters the PIN into an ATM, point-of-sale terminal, phone, or other approved interface. The system protects the entered value and evaluates it through the relevant verification process. The result may be success, failure, bypass, blocked credential, or another exception.
In card payments:
The transaction can still be declined after successful PIN verification because of insufficient funds, credit limits, account restrictions, fraud controls, terminal errors, or issuer policy.
| Credential | Typical form | Main distinction |
|---|---|---|
| PIN | Secret numeric value | Reusable knowledge factor associated with a card, account, or service |
| Password | Secret character string | Often used for online account access rather than card-present verification |
| One-time code | Temporary value valid for one session or event | Not intended for repeated use |
| Card security code | Printed or otherwise provided card credential | Not a PIN and should not be entered when a PIN is requested |
| Biometric | Fingerprint, face, or another physical characteristic | Verification result may stay within a consumer device rather than revealing raw biometric data |
An account holder reports a $600 ATM withdrawal that the bank record shows was completed with a card and correct PIN.
The PIN result is relevant, but it does not answer the dispute alone. The review should examine:
Possible explanations include use by the account holder, use by another person who knew the PIN, card capture or compromise, ATM error, account takeover, or record mismatch. A correct PIN should not be presented as conclusive proof of customer intent.
For institutions and payment processors, important controls include:
For users, avoid sharing a PIN, writing it on the card, using obvious numbers, entering it after unsolicited instructions, or disclosing it to someone claiming to be support staff. Review alerts and statements and report suspected compromise through official channels.
These sources address different technical and legal contexts. They do not establish the outcome of a specific transaction dispute.
This article provides general financial education. It is not banking-security, fraud-investigation, payment-dispute, legal, or compliance advice.