Security for the issuing bank, that is.

Wait, what? Didn’t the bank tell you that the new card would offer you more security? Only if you’re the only one who knows your PIN.

Here’s some background on the issue: Banks and credit card issuers in many cities are introducing “chip and PIN” credit cards. They’re unique in that they have an embedded smartcard as well as the traditional magnetic stripe. When making a purchase with a chip card, the card is inserted into a reader and the customer enters a PIN number to confirm the purchase. The PIN is used in place of a signature.

At the same time, many banks are also taking the opportunity to embed radio-frequency identification tags into cards, allowing contactless transactions. MasterCard’s version of the technology is called PayPass, used at many Tim Hortons outlets. Visa has a similar standard called payWave.

Apart from possible security implications with RFID - which are documented in many places online - the real security for Chip and PIN is in your cardholder agreement. In the event your credit card is stolen, you are required to report the loss or theft to your issuer immediately. If the thief knows or manages to guess your PIN, you’re liable for the purchases made before you report it. In short, if somebody else knows or guesses your PIN, it’s considered that you’ve made the purchase.

Here’s the relevant section from TD Canada Trust’s cardholder agreement:

If you notify us, you will not be liable for any unauthorized use of the Card. However, if the Account is used with a personal identification code such as the Cardholder’s Personal Identification Number (PIN), Connect ID and/or Password, the Primary Cardholder will be liable for the full amount of all unauthorized Transactions which occur before notification.

So while having a Chip and PIN card may prevent unauthorized transactions from being made, make sure that your PIN is secret! It’s also a good idea to change it on a regular basis, and most financial institutions allow you to make this change from their ATMs: simply put the credit card in the machine like you would with a debit card, and select the “Change PIN” option.

- Jake

This entry was posted on Friday, August 8th, 2008 at 6:00 pm and is filed under banking, credit cards. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.