I usually speak very loudly while entering my PIN, "1 2 3 4"
post
My method is to put four fingers over the four digits, and keep them in place while moving all of them for each press.
Assuming a four-digit code, your method generates 2^4^=16 possibilities; mine generates 4^4^=256.
you can hold your other hand over while typing. I know the numbers and dont have to look, thats how I do it.
Thermal camera will reveal the buttons your fingers lingered on and in roughly what order as they cool.
That's why I spend a few minutes afterward licking the keypad to lay false heat signatures and promote faster cooling due to saliva. Attackers/observers are temporarily stunned with confusion and disgust, giving me a brief window to escape unnoticed.
Easily defended against: Upon finishing your transaction, simply press every single button on the machine in quick succession, with roughly equal firmness.
What if I use something else to press the buttons with one hand and covering with the other hand?
Did you learn that from the game Splinter Cell? I remember using that trick, I feel like the odds of it working reliably IRL are extremely low though and also requires a thermal camera.
Somebody, maybe a youtuber, demo'd it on a checkout, maybe at a Target. I can definitely see fingerprints with my thermal camera, even after brief touches, and there's phones now with built-in thermal cams. You do need a pretty cool and uniform temperature keypad, so not one with electronics close behind it, and you have to image the keypad pretty close due to low resolution and pretty soon after the victim leaves - waiting for a receipt would normalize the temps. So, yeah, not a very practical attack.
But I feel like this whole thread is topic is pretty high on the improbable and unrealistic scale.
if my debit card is out then it means i had to pull out the wallet, so just holding the wallet over is both convenient and obstructs a bit more
The ol' two-finger entry method. It's been around longer than PINs.
I prefer calling it "two in the PIN".
Two in the PIN, one in the PUK
Two fingers are ok, but I like to throw in a pinkie just to spice things up.
Something that is potentially helpful for stuff like this:
Every nuneric keypad ive eever seen is laid out in the same way and therr is usually a little bump over 5 which is the middle number.
If you can orient yourself by touch with the bump then the numbers will always be in thr same place and you can use this trick and cover the pad with your hand to be extra discrete.
Its really not hard. Like. Blind people can function in the world.
I learned to use the numpad by touch in high school typing class.
Still probably the most useful class I took in high school
Most card readers I've used in recent years have touch screens.

This is pretty much the norm now.
Sometimes I'll do like jazz hand fingers on the keypad so it looks like I'm just jamming a bunch of random numbers.
Or I'll mimic something like this but without actually pressing the buttons

my pin is 12 digits, I could say it out loud and no one would still be able to get in
Is it 1111 1111 1111?
Shit Not any more!
0118 999 881 999 119 725 3
My bank limits me to 4 digits, saying it "technically fulfills" the card supplier's security standards. I guess fake keypads are a bigger risk than people standing behind you, but still. Then again, 6 digits, which is the maximum, wouldn't change much, either.
You can do the same on a keyboard. Use your left hand to lightly tap the 1234 keys while actually typing out the characters with your right. Saved me when I had to sit next to some nosy kid once.
If somebody steals your card, wouldn't they run the transaction as credit? They wouldn't need your PIN.
I use my penis as a stylus for optimal security--no way the casual viewer can actually see it in person.
Do people not use fingerprint? Doesn't just make it harder, but eliminates the peeping aspect altogether.
How do you use a fingerprint to enter a pin?
You don't?
This post is about a pin for your debit card not your cellphone
If you're in the US or plan to go there, don't use biometrics for your phone. "Law enforcement" can't make you give up your pin, but they can take your biometrics.
Fingerprint, then pin.
all 59 comments