Be*PINWISE Cardholder FAQs

Be*PINWISE Cardholder FAQs

1. Who is behind the BuySafe initiative? The Industry Security Initiative (ISI)/BuySafe initiative comprises representatives of ten Australian financial institutions including all of the major banks plus Visa, MasterCard, American Express and Diners Club International. The initiative members represent the payments card industry and their role is to ensure that there is a consistent experience for consumers when using their credit or debit card to pay for purchases in Australia, regardless of the financial institution that issues the card. 2. What does it mean to be pinwise and why should I use a PIN? Being pinwise means using a PIN to confirm your identity when you use your credit or debit card to conduct a transaction at a point of sale in Australia. Using a PIN helps protect against fraud due to lost or stolen cards. This is because the chances of someone correctly guessing your PIN, which can be from four to six digits long, is very small. 3. Do all transactions in Australia need a PIN? No, not all transactions at point of sale will need a PIN, most notably contactless transactions (Visa paywave, MasterCard PayPass or American Express Contactless) under $100 do not need to be authorised by a PIN, and do not require a signature today. Other exemptions are: Certain small transactions at payment terminals that are often unattended, for example parking meters (known as small ticket payments ), which are generally limited to amounts of $35 or less International transactions (transactions conducted by cardholders with cards issued by banks/financial institutions outside Australia) Magnetic stripe transactions (generally on payment cards that do not have a chip, for example some pre-paid cards and gift cards) Signature only cards. These cards may be issued by certain financial institutions to accommodate special needs of individual cardholders and are subject to specific criteria In each case, the payment terminal that is reading your card will prompt for a PIN if it is required.

4. Can I still use the tap option? Yes. In Australia, you can still tap your MasterCard PayPass, wave your Visa paywave or American Express Contactless enabled credit or debit card on a contactless enabled terminal or touchpad, for any transaction under the value of $100 without the need to PIN or sign. To check whether the point-of-sale terminal supports contactless transactions, ask the merchant at the terminal, or simply look at the terminal s screen prompt for instructions. 5. Why is a PIN safer than signing? When using Chip-and-PIN at the point-of-sale terminal, you enter a PIN when you authorise your transaction, rather than signing. Your PIN transaction is encrypted and sent in real-time to your card issuer to be authorised. PIN usage can help protect against fraud due to lost or stolen cards, because the fraudster would need to have both your card and your PIN; this is why you should not share/tell your PIN with any other person, only you should know your PIN. In addition, the electronic chips on the cards are very difficult (almost impossible) for a fraudster to copy. 6. What does a chip card look like? Your Australian issued credit or debit card will most likely already have a "smart" chip. The chip itself is embedded in the card, but the top of the gold/silver contact plate can be seen from the front of the card, on the left hand side. There will be occasions when the merchant accepting your card for payment, in Australia and overseas, will not be able to process a PIN transaction and you will be required to sign instead. Your card will therefore retain both its magnetic stripe and signature strip on the back. 7. Is it unsafe to sign for purchases when I go overseas? Your Australian issued credit or debit card may or may not support Chipand-Pin when you travel overseas, depending on your destination. If the equipment at the overseas merchant does not allow you to use PIN, you should still feel safe that you are protected by signature verification. Be sure that you have signed the back of your card, and that the merchant checks the signature for verification. 8. What happens if I still try to sign for a purchase in Australia? From a date still to be finalised, but likely to be within the next 12 months, if the terminal has requested a PIN (likely to see ENTER PIN on the screen) then it will not allow you to continue with the transaction unless your PIN is entered. Therefore it is important that you have and use a PIN as soon as possible in order to avoid any issues with processing your payments in the future.

9. How do I get a PIN for my card? How do I change my PIN? How do I find out if I have a PIN on my card already? In the same way as today, your financial institution/card issuer may mail you the PIN for your credit or debit card (it will arrive in a separate mailing to your actual card). If you have forgotten your PIN, your financial institution/card issuer may be able to send you another PIN. It will be important to remember the PIN for each of your debit and credit cards. If you do not remember what PIN you have, it is best for you to contact your financial institution/card issuer directly. Different card issuers have different processes for changing your PIN. It is best for you to contact your financial institution/card issuer directly, or visit their website, to find out how to change your PIN or request a new one. 10. I have just received my new card(s). What should I do with my old card(s)? When you receive your new card(s), follow the instructions of your financial institution/card issuer to activate your new card(s). You should cut up and dispose of your old card securely. 11. How do I choose a secure PIN? Much like choosing a computer password, and, like those passwords, you should keep your PIN a secret. You should avoid using a PIN that contains repeating characters (like 9999) or digits in sequence (like 1234), or numbers that represent publically researchable information, such as your birthday, year of birth, or address. Some financial institutions and card issuers allow cardholders to set longer PINs, of up to six characters long. A longer PIN number is much harder to guess than a shorter one. A longer PIN may not be compatible in some overseas locations. In that instance you may have to sign for goods and services. Longer PINs on debit cards may not be accepted in overseas ATMs for cash withdrawals. 12. I am having trouble remembering my PIN; how does Chip-and-PIN affect me? You can change your PIN to a four-digit or six-digit number that is easier to remember. Different card issuers have different processes for changing your PIN. It is best for you to contact your financial institution/card issuer directly, or visit their website, to find out how to change your PIN. You should make sure that it is a number that nobody else can easily guess.

13. What happens if I forget my PIN? If you type in the wrong PIN three times into the point-of-sale terminal, your card will become locked and you will be unable to complete a point-of-sale transaction. You should contact your financial institution/card issuer to obtain instructions on how to unlock it. They will usually ask you to go to an ATM or branch to unlock the card. When you know your PIN, it will work in an ATM to obtain cash. If you have forgotten your PIN, or if you don t know if you have a PIN, you should contact your financial institution directly. They will advise you of their procedures for supplying you with a new or replacement PIN. 14. Will I be able to change my PIN at an ATM? Some financial institutions will allow you to reset your PIN at the ATMs provided by them. To reset your PIN at an ATM, you will be required to use the existing PIN. Not all financial institutions will allow a PIN change at ATM. We advise that you contact your financial institution to understand all of their specific options for changing your PIN. 15. Do Chip-and-PIN cards still need to be signed on the reverse? Yes. This is still necessary, as the signature will continue to be used for verification in certain situations, such as travelling abroad to a country where Chip-and-PIN is not used, or where a merchant has not yet upgraded to a Chipand-PIN terminal. 16. Will the PIN I use for making purchases be the same as the PIN used for cash withdrawals at the ATM? Yes. Each new Chip-and-PIN card will have one PIN that can be used for cash withdrawals at ATMs, and purchases at point-of-sale. 17. Will PINs be used to make card transactions through the Internet or over the telephone? No. Chip-and-PIN is only applicable when you are physically present at the point-of-sale during the purchase or cash-out transaction. You should never share your PIN with anyone if purchasing goods online or via the telephone. 18. How are cards I use for business purposes affected by Chip-and-PIN? If you have been issued a corporate payment card from your employer, or if you were issued a corporate payment card for a business you own, your corporate cards will be upgraded to Chip-and-PIN, much like a regular Chip-and-PIN credit or debit card. Corporate cards may also be commonly referred to as commercial, business, or company cards, and are generally used to make business-related

payments such as invoice payments or business expenses. If you do not have one already, you will need a PIN for these types of chip card. 19. Will I be able to withdraw cash on a card issued by my employer? The ability to withdraw cash is specific to each financial institution/card issuer. It is best for you to contact your employer directly, as the ability to withdraw cash may also depend on the policy of your employer. For further information or help, please contact your financial institution/card issuer. 20. How does Chip-and-PIN affect those who are blind or partially sighted? The vast majority of PIN pads on point-of-sale terminals have a tactile feature that includes a raised dot on the middle 5 button. This layout will be familiar to most people with vision impairments, and should therefore be easier to use. Also, the primary 'function' keys are colour coded for ease of visibility. Usually, the 'cancel' button is red, the 'clear/cancel' button is yellow, and the 'Enter/OK' button is green. Many PIN pads are designed to be picked up from their holders, to make it easier and more secure for you to enter your PIN. You may also come across PIN pads which have been built into the shop counter, and in restaurants and bars the PIN pads are likely to be wireless so that you can pay whilst sitting at the table. Whatever the case may be, merchant staff should always be able to help you through the process and answer any queries. But you should never disclose your PIN to the staff, your PIN should remain confidential/secret to you. Research with blind/visually impaired cardholders in February 2013 showed that the vast majority of those interviewed were happy to use a PIN, having tried it and found it easier and quicker than signing. If you believe you have a disability that may make it difficult for you to use a PIN, contact your financial institution/card issuer as they will be able to discuss this with you. 21. I am having trouble using my hands, how does Chip-and-PIN affect me? Some people may have difficulty with entering PINs, particularly those with physical conditions such as arthritis or cerebral palsy. If you have a disability and think that you may have difficulty with PIN due to impairment, please contact your financial institution/card issuer and they will discuss options with you. 22. In what cases would cardholders not have to use a PIN? A PIN is not required for mail or telephone order transactions, or transactions conducted on the Internet.

Chip-and-PIN is only applicable when you are physically present at the point-of-sale during the purchase or withdrawing cash at an ATM. There are some circumstances at the physical point-of-sale when PIN is not required (and neither is signature), most notably contactless ( Tap and Go ) payments under $100 and low value payments (under $35) example parking meters at some merchants. There are no circumstances in which you should reveal your PIN when making a purchase or booking services by mail order or over the telephone or internet. Please contact your financial institution/card issuer for a full list of exemptions. 23. Who else knows my PIN and who is it safe to reveal my PIN to? Except for you, no one (not even the card issuing staff) knows your PIN. The PIN must not be disclosed to anyone, including financial institution /card issuer, a member of law enforcement (e.g. the police) and merchant staff at point-of-sale. However, if you do think someone else knows or has found out your PIN, you must change your PIN immediately, whether it is by contacting your financial institution card issuer to have a new PIN issued, or by changing your PIN using your financial institution s/card issuer s ATM or branch network, if supported. Your card issuer will never ask you to disclose your PIN. 24. I have been told not to write my PIN down - what can I do? You could change your PIN to a number that is easier for you to remember, ensuring that you do not use numbers that others could easily guess. For a list of methods of how to change your PIN, it is best for you to contact your financial institution /card issuer for further instructions. 25. What if someone has seen my PIN? If you suspect someone other than yourself knows your PIN, you must immediately change your PIN, or have a new PIN issued to you, by contacting your financial institution/card issuer and gaining further instructions. 26. What if I m not prompted to enter a PIN? Where the point-of-sale terminal at the merchant does not prompt you to enter a PIN, you will be asked to follow the current card payment process, normally using your signature to confirm the transaction. Note that contactless transactions ( Tap and Go ) under $100 and some low value transactions under $35 will not require a PIN or a signature.

27. Can I ask the merchant staff to enter my PIN for me? No. For security reasons, the PIN must never be shared with anyone, even card issuer staff. If you are unable to use a PIN please contact your financial institution/card issuer to discuss alternative methods. 28. What if I forget my PIN when I get to the till? Provided you have not locked your PIN by entering it incorrectly three times, you should tell the cashier, who will advise you what alternatives are available. If no alternatives are available, you will have to use a different card or an alternative payment method. 29. What happens if I exceed my PIN tries at an ATM or payment terminal? If you enter the wrong PIN multiple times in a row, your card may be locked so that fraudsters cannot keep trying to guess your PIN. Unlocking the card is simple - just contact your financial institution /card issuer for instructions. For some cards, it may be possible to unlock your PIN at your nearest branch; however it is best to contact your financial institution /card issuer for further instructions. 30. If I return goods for a refund, will I need to enter my PIN to receive the money back? Merchant processes for dealing with refunds may vary. In some cases, you may be asked to enter your PIN. 31. What kind of point-of-sale transactions will require me to use a PIN? Unless conducting a contactless transaction under $100 or a small ticket purchase (for example parking meters) generally limited to amounts of $35 or less, a PIN will be required at all point-of-sale terminals in Australia for purchases of goods and services, as well as cash-out transactions, if your card supports them. To find out if your card has cash-out functionality, please contact your financial institution/card issuer directly. Also not all merchants support cashout at point-of-sale. Please ensure that you ask your merchant whether or not it supports cash-out at their terminal. 32. What happens when I travel overseas? If you are travelling overseas, it is a good idea to know your PIN before you leave. It is best to check with your financial institution/card issuer before travelling overseas, in order to understand how your financial institution /card issuer s procedures apply and whether you will be asked to enter a PIN

when travelling overseas. This is because some financial institutions/card issuers program their cards to require a PIN even when used overseas. If you are travelling overseas, you should contact your financial institution/card issuer about your travel plans, in order to ensure that they know to expect transactions processed from your country of destination. 33. What happens when I travel overseas, but have a longer PIN of six digits? If you have changed your PIN from the originally issued four (4) digit PIN to a six (6) digit PIN, some of your transactions may not be successful overseas. You may also encounter an error with your four digit PIN in some countries that require a six digit PIN. The most widespread standard currently, however, is a 4 digit PIN. Please be aware some countries and overseas financial institutions have different PIN rules to those in Australia. If you have further questions about PIN usage overseas, please contact your financial institution/card issuer for further information. 34. I am visiting Australia as a tourist or on business and I don't have a Chip-and-PIN card - will I be able to use it in shops? You don't need to worry. Your cards will still be accepted in Australian shops and by other businesses including hotels and restaurants. You will simply be asked to sign, just as before. 35. How can I add a gratuity in a restaurant? Most new pay-at-table terminals at restaurants should display the amount that you are paying and ask if you wish to add a gratuity (often providing the option of adding a percentage or a dollar figure that you can choose). Follow the display prompts. If you add a gratuity amount, the total amount of the transaction will then be displayed and you will be prompted to enter your PIN. By doing so you are accepting the total amount of the transaction. 36. If a transaction is pre-authorised - for example when checking into a hotel - will I need to enter my PIN? No. PIN is only required at point-of-sale terminals for purchases of goods and services, as well as cash-out transactions if your card supports them. Please see Q 31: What kind of point-of-sale transactions will require me to use a PIN?