So my PIN-priority SDFCU Cashback+ got compromised. New one came in the mail today and I just don't understand it.

It definitely has an offline PIN stored on the card; with cardpeek I am able to confirm that my selected PIN is there. If I enter the wrong PIN on purpose it decrements the PIN-try counter; if I enter the right PIN I get success and the PIN-try is reset to 3.

But the CVM list doesn't mention offline PIN at all!

Enciphered PIN online - If unattended cash
Signature - If manual cash
Fail - If purchase with Cashback
Signature
No CVM
Enciphered PIN verified online


What gives? Is this just a programming error? Are they doing something goofy where they will use the issuer script to re-write the CVM list after the first (non-quickchip) transaction? There's got to be *something* I'm missing; why would they include the PIN on the chip at all if they weren't going to use it? Even if they goofed and sent me the signature-preferring card by mistake (and I called SDFCU -- they assure me that I got a PIN-priority card) even the signature card would still reference the offline PIN somewhere?