On 2 Sep, 16:16, wrote:
On Wed, 2 Sep 2009 07:16:02 -0700 (PDT)

Andy wrote:
Oh and to reinforce the point, if you are undertaking a 'customer
present' transaction, the PIN number is validated directly against the
card and not sent to any server. The card holds the PIN, not the bank.

If your card has a magnetic stripe on the back then your bank is probably
well aware of your PIN otherwise you'd never be able to use it in non
chip-and-pin cash machines in other countries.


Yes, but we were talking about UK on-line transactions, not foreign
ATMs. I know that the PIN is held by the bank, otherwise it would be
very hard for a reminder to be sent. However, in the UK the banks
don't remotely validate PINs for transactions anymore.