Why do you have to put in your debit pin in person, but not online?
In: Economics
For security there are 3 basic kinds of keys/locks
1 something you know (PIN password, birth date, first pet)
2 something you are (fingerprint, retina scan)
3 something you have (your cellphone number, a token generator, a keycard)
In person you use 1 and 3, 1 is PIN and 3 is your credit card itself.
Online you cannot use number 2 easily, and number 3 is not yet widely implemented, maybe later we will need a token in order to make a purchase online.
The important bit here is that you do not want those 3 methods to ever mix.
You do not want to send something you know, like a pin to a third party who also has your credit card number and who is not your bank.
A wokaround commonly implemented is that online retailers usually charge you a certain ammount, then ask you to login to your bank and find the ammount charged, finally they deposit the money back to your account.
This way, something you know is the secret ammount, and something you have/know is the card number and cvv.
Latest Answers