Talk:Chip and PIN

Highly POV paragraphs need their meritable material salvaged

I've removed some paragraphs which contained some fact and some personal interpretation from the article; I hope someone will be able to reinsert the usable material from them in a more encyclopedic fashion. (Where you see italicized text, material was added in the middle of an existing paragraph, and the italics denote the text that was there before.) -- Antaeus Feldspar 21:21, 22 Nov 2004 (UTC)

• The new chip and pin system is being advertised as a way of reducing card fraud at an expense in the UK approaching £300 million pounds, a cost significantly less than the potential savings if successful. It is questionable whether any such savings made as a result of the new system will be passed onto their respective British customers. Further more it is likely a way of transferring responsibility for card fraud from the Bank to the customer. It is currently the Banks responsibility to compensate customers for any spending on an ordinary bank card following the reporting of a theft and a purchases being made with a counterfeited signature. However, with chip and pin the likelihood of a four digit pin number being obtained is immeasurably greater. Acquisition of pin numbers currently is limited to the cash machine where you are generally alert and the machine is reasonably well shielded but with chip and pin coupled to the poorly designed card machines; cheaply produced and with no real measures taken to prevent the observation of a pin number (general visibility on all sides). From a banks point of view if withdrawals/purchases are made with the corresponding pin number then whose fault is it that t years he money was illegitimately obtained. Surely it should rest with the person whose account it is. It is therefore the responsibility of the victim of fraud to prove to the bank/court that the pin number was not carelessly given out/recorded and that they had taken all reasonable action to safe guard against fraud. Is this measure really needed, after all how many times do you make a purchase with your card and received your card back simultaneously as you hand the cashier the signed receipt.

• France has cut card fraud by more than 80% using a similar, but incompatible system. Although the french system is less advanced than the system currently being rolled out in the UK; the french system was introduced at a time when no other countries posesed such a system and thus most corresponding organised crime asociated with debit/credit card fraud fled predominantly to the UK but also to the Netherlands and Denmark. It is worth keeping in mind that when the Dutch intoduced a chip and pin system no real reduction in card fraud occurred comparable to that experienced by the French some years earlier. Chip and PIN is the name given to the initiative in the UK but countries worldwide are launching their own initiatives based on the EMV standard, which is a group effort between Europay, MasterCard and VISA. By the end of 2004, 100 countries will be using compatible systems based on this standard, and France aims to migrate its existing systems to be compatible with the new cards.

Precision: France is using smartcards for more than 20 years and since 1995 for ATMs! —Preceding unsigned comment added by 193.15.240.60 (talk) 10:28, 28 February 2008 (UTC)

Smartcards are not the same as the Chip and Pin system. _TalkIslander 11:56, 28 February 2008 (UTC)

Chip and PIN cards in the UK (not sure if this applies elsewhere but pretty sure it does) have a signiture with them as well, this allows for user to facilitate their signiture in cases where the chip and PIN machine may not be functioning. A little known fact is that if you request to sign instead of use your PIN then the shop must allow you, this is so that people with illnesses such as Dislexia, Parkinsons or other mental and memory related illnesses who cannot make use of the PIN functionality, are not discriminated against. So all in all with the combination of increased risk of revealing your PIN to people by using it more often and criminals abilities to still use the signiture, they are not safer and Chip and PIN's main security benefits rest solely on the criminal communities ignorance.

Chip and Signature Vice PIN:

The Guardian article, ‘Safety in Numbers? Not Likely,’ http://money.guardian.co.uk/creditanddebt/creditcards/story/0,1456,1336619,00.html suggests we can do little if we have issues with having a PIN. This could be one having no trust in PIN security, either PIN issuing methods, physical PIN pad security or faith in our own ability to remember seldom used numbers or fears over liability shift.

Card issuers being card issuers are not telling us the whole truth, in fact they are trying to force PINs onto consumers who are totally unable to manage a PIN never mind those of us who fall into the afore mentioned category. ‘Confusion over Chip and PIN is worse than expected.’ http://www.telegraph.co.uk/news/main.jhtml?xml=/news/2005/03/11/nchip11.xml

The point is anyone who insists can have a Chip & Signature Card vice Chip & PIN. A Chip and Signature Card when inserted into the new type card reader, reads to the Chip to ensure the card is genuine and hasn’t been reported lost or stolen. When this is done, rather than a prompt asking the cardholder to enter a PIN, a transaction slip is produced for the cardholder to sign in the normal manner.

The choice is yours, Chip & PIN or Chip & Signature. If you opt for Chip & Signature then beware you have to be firm with your card issuer. In my own experience acquiring a Chip & Signature Debit card is a lot easier than acquiring a Chip & Signture Credit Card.

Added a new criticism section

Hopefully not too POV, but I haven't included any references yet.

One thing I would say though, is that it is extremely easy to know a person's PIN by being behind them at Sainsburys -- I've yet to see anyone who successfully shielded their PIN so that I couldn't read it.

In fact, it's pretty obvious just from the delay between subsequent keypresses which numbers someone has typed, even if they do hold their hand over the keypad (which only prevents viewing from one direction) Ojw 18:18, 16 October 2005 (UTC)

Referencing the above stats. etc. would be add strength to this critic

criticism of the criticism section

It talks about the new system having introducing a whole lot of new card reader machines increasing the likelyhood of duplicating cards. I don't see this as being the case, as a magnetic card duplicator could have been used in every instance where chip duplication can occur currently... Every place in the new system was clonable in the old system, so no MORE OPPORTUNITIES TO CLONE CARDS

Stealing cards in post could be done in the old system also...

benefit

It doesn't mention the benefit of the card potentially being useless, if stolen without the pin.... kinda obvious but should be there.

I'd also like to see statistics on fraud and sources of those statistics...

Talking of sources, please remember to sign and date your talk entries.--Ear1grey 13:52, 28 February 2007 (UTC)

History

This system has proved reasonably effective, but has a number of security flaws, including the ability to steal a card in the post, or to learn to forge the signature on the card. More recently, technology has become available on the black market for both reading and writing the magnetic stripes, allowing cards to be easily cloned and used without the owner's knowledge.

Chip and PIN doesn't address the problem of postal theft since it is just as easy to steal a chip card as it is to steal a magstripe card. The only additional security is that you need to steal two items of mail (card plus PIN notifier) rather than just one - which isn't going to bee too difficult.

The equipment to read and write magstripes isn't new or black market. These readers have been openly available to the public since magstripe cards were first used.

58.11.33.178

Merger with EMV

• In my opinion EMV and Chip and PIN should remain separate. One refers to the technology whereas the other refers to the UK initiative. However, comments on the safety and security of the Chip and PIN/EMV technology belong in the EMV article unless they are UK-specific. --Jal 14:13, 17 May 2006 (UTC)

• I agree they should remain separate. One is UK (Chip and PIN) and the other is World wide 'Standard'.

The safety of the PIN method is not related to EMV (Which is a standard), but to the way it is implemented (i.e using PIN as the verification). It could be in either! Ben 16:06, 23 May 2006 (UTC)

benefit?

"Under the old system, a customer would have to hand their card to the assistant for each payment. In certain environments such as restaurants, for example, this often meant that the card would be taken away from the customer to the card machine. This is no longer the case with the introduction of Chip and PIN as wireless PIN pads have been introduced that can be brought to the customer's table." How is this a benefit? Chip and Pin tableside payment in restaurants confuses the technophobic/slightly dozy [often to the extent that a customer end up paying too much or too little for their meal], rushes customers and yet manages not to be any faster than the old method, creates problems if there is a language barrier [i speak from personal experience here] and it is just downright uncouth and higly impersonal to have a machine plonked in front of your face at the end of a meal. Suggest either careful rewording or removal of this section. who's with me?

I think it is a benefit (or at least an improvement) for the purpose of the article. I could probably do with a little rewording to say WHY it is a benefit - along the lines of reducing the chances of card cloning (by an restaurant employee quickly copying the mag swipe), as the card does not leave your view - but do not think it should be deleted as it could be used to help explain reasoning behind C&P (even if you or I, may or may not agree with the reasoning). From a NPOV, technophobic people will probably have an issue wherever they pay with a C&P card, and paying by these machines will be something people will get used too. Language issues would be same for static and mobile machines. Having a machine plonked in front of you seems down to the (bad) restaurants staff not the C&P format. There is already a large critisums section, and the benefits section should be BIGGER not smaller or deleted to make the article more NPOV. Ben 19:20, 19 June 2006 (UTC)

amx in the states

just wondering why american express in the states is the only company to also do chip and pin?

validity of the term "liability shift"

Regarding an edit asking for a citation for the origins of the phrase "liability shift": I was responsible for the original edit, and cannot provide a citation for this. I was heavily involved in early UK chip & PIN development, as a software vendor. As such, the quotation is word-of-mouth from an insider. It is, nonetheless, true

Canada

This story on ePaynews.com says that "After December 31, 2012, domestically-issued magnetic-stripe cards will no longer be accepted at Canadian ATMs. They will not be accepted at POS terminals after December 31, 2015." The point is that the article is titled "Canadian Tire on Track for Chip-and-PIN" - ie using pretty much the same name (bar the hyphens) as in the UK. 86.132.142.157 01:05, 29 May 2007 (UTC)

That epaynews.com link is dead, saying "/index.cgi was not found on this server". Total fail on the cool URIs front. —Preceding unsigned comment added by 70.27.0.45 (talk) 16:49, 17 June 2010 (UTC)

International Rollout

Why no mention of Chip and Pin (EMV) in Australia, New Zealand, Turkey, Mexico, Brazil and Canada. Could not find a definitive list of countries that are rolling out EMV. 77.98.17.93 (talk) 22:39, 13 March 2011 (UTC)

Fair use rationale for Image:Chipandpin.gif

this section is irrelevant. See my note in the next section. OsamaBinLogin (talk) 07:21, 17 December 2010 (UTC)

Image:Chipandpin.gif is being used on this article. I notice the image page specifies that the image is being used under fair use but there is no explanation or rationale as to why its use in Wikipedia articles constitutes fair use. In addition to the boilerplate fair use template, you must also write out on the image description page a specific explanation or rationale for why using this image in each article is consistent with fair use.

Please go to the image description page and edit it to include a fair use rationale. Using one of the templates at Wikipedia:Fair use rationale guideline is an easy way to insure that your image is in compliance with Wikipedia policy, but remember that you must complete the template. Do not simply insert a blank template on an image page.

If there is other other fair use media, consider checking that you have specified the fair use rationale on the other images used on this page. Note that any fair use images uploaded after 4 May, 2006, and lacking such an explanation will be deleted one week after they have been uploaded, as described on criteria for speedy deletion. If you have any questions please ask them at the Media copyright questions page. Thank you.BetacommandBot 20:20, 2 June 2007 (UTC)

I didn't upload the logo, but have added a rough fair use rational. Not sure if it will sufice. TheIslander 22:01, 2 June 2007 (UTC)

Chipandpin.jpg

...why? - ∅ (∅), 18:26, 26 December 2007 (UTC)

Care to explain your question in a few more words? I'll assume you don't mean "Why include it", as it's clearly a very good way of giving the reader a good idea of how large the chip is. _TheIslander 21:51, 26 December 2007 (UTC)

Ah. I thought someone was simply making a cheap (and unencyclopedic) visual pun. - ∅ (∅), 23:38, 26 December 2007 (UTC)

Well, yep, that's a good point :P. Still, my point above is valid. _TheIslander 00:33, 27 December 2007 (UTC)

I can't beleive the pin shown is the stated six inches long, its too badly formed. Surely it is an ordinary dressmakers pin, having a length of about one inch. The sizes of the fibres in the background appear to confirm this.

Polyscop (talk) 11:37, 7 October 2009 (UTC)

Furthermore, If it is in fact a 6" pin, why would you compare the chip to an object which most people don't have any reference for? I don't regularly see a 6" pin lying around. How about a dime?

qexter (talk) 12:10, 10 December 2009 (EST)

oh gosh children, the Pin was placed there as a pun, it's a chip… and a PIN! The mention of six inches gives enough scale that the viewer doesn't need a dime around to understand the size. I'm fairly sure Wikipedia exists outside of the US and other national boundaries where currency ends - comparing it to an american dime seems silly for scale when most people visiting this site don't have any reference of how large a dime is. Also, given the international nature of Wikipedia perhaps it would be more accessible to place the length in SI units, where 6 inches roughly equals 15.25cm. 74.14.230.2 (talk) 14:14, 28 June 2010 (UTC)

I think that photo of the tiny chip and the sewing pin is highly inappropriate. A lot of people who try to read WIkipedia just have trouble understanding it (cuz it's written by nerds like us). OK so you and I can understand that it's a stupid pun. But what happens when someone less versed, or who doesn't understand english very well, sees the title of the article is 'chip and pin' and there's a picture of a Chip and Pin and they think it's something to do with sewing or else very small postage stamps. If an article has one picture, it should be a picture of the topic, not something kinda sortof related in funny punny ways to the topic, a picture that'll confuse.

The size of the chip is irrelevant to the concept of chip and pin. Nobody takes a naked chip that small and brings it to the grocery store to buy ice cream. And nobody brings along a large metal spike, either. There's two items in the photo and both are misleading. Get rid of it.

You want a photo of Chip and Pin? gimme a photo of the actual chip card that's in your wallet right now. Fingerprints and signs of wear are encouraged, cuz that's what a real card really looks like. May I suggest a cellphone pic as that's good enough. And since you're taking the picture, you own the copyright and can donate it to Wikipedia or whatever. (I'm a yank with stupid magstripe cards in my wallet otherwise i'd doit.) OsamaBinLogin (talk) 07:13, 17 December 2010 (UTC)

Now out in Canada

Chip and Pin cards are now being issued in Canada for credit and debit cards, should the article mention this? —Preceding unsigned comment added by 142.68.95.239 (talk) 02:57, 24 May 2009 (UTC)

Foreign cards

I'm surprised that there is no mention of the impact of chip and pin on foreign cards. On my recent trip back to Britain, I encountered places that would not take my American Visa or Mastercard because they didn't have chip and pin. Another colleague of mine recently came back from France and found that she was unable to buy gas while in France because her card didn't have a chip and pin. It really kills the convenience of being able to use your credit card while traveling. Wjousts (talk) 16:49, 27 July 2009 (UTC)

Still as of now, it's really the US that is waaaaaay behind on updating its card system by implementing the Chip & Pin system amongst its banking industry. Whereas C&P has been almost universal from 2010 across most of Europe. So the real question that this article needs adding, is why the US has not bothered to go down this route yet, given the successful usage in most of the rest of the developed world for years now? Jimthing (talk) 07:18, 21 November 2013 (UTC)

in September 2009 a liquor store proprietor somewhere in WA told me that the US was starting to roll out chip & PIN; indeed his terminal asked me to enter my PIN, before declining the transaction. This happened for both my debit and credit cards (both British). Five years later and the number of card-enabled "gas" pumps asking for a ZIP code has reached epidemic proportions while chip & PIN was nowhere to be seen. Were there ever plans to introduce it in the US? Mr Larrington (talk) 16:43, 8 October 2014 (UTC)

Communication between reader and the bank

I have seen a one-unit handheld chip-and-PIN card reader in the UK, about 8 cm × 10 cm × 15 cm. It reads the card and takes the PIN then communicates wirelessly with the bank for authorization. What is the communication between this unit and the bank? Is it through the mobile-phone network, or some sort of satellite system (as the owner of the shop assumes)? – Kaihsu (talk) 13:43, 7 July 2010 (UTC)

According to this web page about a mobile chip-and-PIN terminal from the Federation of Small Businesses, it is just GPRS. HSBC also speaks of a dedicated phone line. – Kaihsu (talk) 11:16, 27 July 2010 (UTC)

This article needs to cover this topic more generically

The "chip and pin" technology is a rather broad technology, used in many countries. WP does not yet have an article on that technology. WP does have the article Smart card, but that is an even broader topic, covering all kinds of cards, including chip-and-pin, as well as other non-PIN cards. This article, as written now, is focused on a specific initiative dating to about 2004/2005 in UK & Ireland, which is just one example of the generic technology. Historically, it may be that the UK/Ireland effort invented the term "chip and pin", and perhaps they pioneered the technology; but now in 2012 it is a generic term used throughout the industry. For example uses of the term in the generic sense, see here and here. For these reasons, I suggest that this article be modified so that it includes the generic technology, as found in many countries, and that the UK/Ireland proprietary aspects of this article be changed to a section within the article. Thoughts? --Noleander (talk) 21:26, 31 July 2012 (UTC)

Use of the word Microchip

This is a brand name that I suspect should not be on here, in the place it is used it could be replaced with the words "Silicon Chip" or "Computer Chip". — Preceding unsigned comment added by 86.13.97.89 (talk) 20:12, 8 October 2012 (UTC)

Microchip is a brand name? TIL... — Preceding unsigned comment added by 77.97.204.235 (talk) 02:00, 23 January 2014 (UTC)

"How it works" section clearly wrong

I can change my pin over the phone, so it obviously isn't the chip that verifies the pin. I suspect the chip hashes the pin together with a private key as well as data transmitted by the bank and the bank does the verification. — Preceding unsigned comment added by Kiyo.masui (talk • contribs) 00:01, 7 September 2013 (UTC)

It's possible that the card can verify the PIN when in offline mode, but in general you are right, and I've corrected it. Touchdown Turnaround (talk)

This article should be deleted & redirected or the contents should mostly be removed

The article should be redirected to EMV, which is the better version of this page. Touchdown Turnaround (talk) 17:02, 13 June 2014 (UTC)

Outdated

While "chip-n-pin" may have been a specific branding in the past, it has clearly moved into the "kleenex" group of generics. If the prez is going to refer to EMV as Chip-n-Pin, I see no reason why the Wiki shouldn't. Maury Markowitz (talk) 12:49, 20 October 2014 (UTC)

I'm not even in the UK and we've been using this for decades (since the 80s maybe?) in France. This article left me very confused. It feels incredibly inaccurate. — Preceding unsigned comment added by 83.194.180.17 (talk) 10:43, 28 March 2015 (UTC)

I'm in Canada where "chip and PIN" has become a generic term for this payment method which is now universally adopted, along with contactless payments. Our neighbours down south are relatively new to the technology, so this certainly deserved a {{globalize}} template. Also note the proposed merge notice at the top of the article page. <<< SOME GADGET GEEK >>> (talk) 21:23, 7 June 2015 (UTC)

this user cannot believe that in this whole evolving mess of article there's not one mention of what the acronym EMV stands for {hint: Europay, MasterCard, and Visa}...someone please fix, thanks. 184.155.126.185 (talk) 08:22, 4 August 2015 (UTC)anon