Just read, "please enter your secret PIN"! What?

Question

Just (almost) finished buying something on the net when I got this screenful...

----------------------- Visa Verification

"...To support our already high levels of fraud screening we have implemented VBV (Verified by Visa). This is very similar in operation to the Chip and Pin process that you find in most high street retailers.

As you are viewing this screen, this means that your card has been enrolled on to the VBV program. To complete this transaction ***please enter your secret pin number*** into the box on the right. This will then be submitted to the Visa Servers over a secure link, this information will not be held/viewed on any of our systems.

If you have any questions...."

------------------------

I declined to enter my "secret pin number" and my 2nd reason being the form on that screen didn't seem to have a place to enter it anyway! (There was one for the 3 digit code on the card reverse)

My question is simply - is this a genuine request by that site (which IS a reputable site). I thought it was practice that no site would ever ask for the PIN.

Colin Wilson · Accepted Answer

I don't recall being asked to enter my PIN when I signed up a couple of months ago (ebuyer IIRC)

What site is it ?

Could the site have been compromised / did you follow a link in an email to get to it (i.e. cross site scripting to keylog entries on a legit site for their own use)

Peter King · Answer

as it says, somebody (probably you) has already enrolled your card in Verified by Visa.

Thus, it is asking for your VBV 'secret pin' not your ATM PIN. Obviously you should never enter your ATM PIN on the internet.

Peter

Chris Blunt · Answer

When you first enrolled in Verified By Visa your bank would have asked you to provide them with a word or phrase which would be known only to you and them. As well as this, they would have asked you to choose a password to use.

When you make a payment at a web site that supports Verified By Visa, a pop-up window from your bank should appear which contains the phrase you originally chose. That's how you can be confident that the window has originated from your bank. The window will also contain details of the merchant's name and the amount that you are being charged. If everything is correct you enter your password and the transaction is approved.

If you never enrolled in Verified By Visa, and don't remember agreeing a pass phrase and password with your bank then its possible this is a scam.

Chris

Fatby f the Underwrld · Answer

What was the website?

Alan · Answer

More information here  Alan

tinnews · Answer

It's a different PIN specific to Verified by Visa, you have to go an register your card on a "Verified by Visa" site to get the PIN. It's all a right royal pain in the backside to be quite honest and not all Visa cards can even be registered with the service.

Just read, "please enter your secret PIN"! What?

Join the Discussion

Didn't find your answer?