So I took the card to two different ATMs (one BofA, one a random credit union) and took cash advances. Unsurprisingly the CVM list on the card has not changed.
This is actually the second replacement card. After the fraud, and I called and asked for the replacement to be expedited. When I got that card and saw it wasn't PIN-priority, I called back and explained that I'd gotten a signature-preferring card. The CSR assured me that my card is PIN-preferring. I tried to explain that it isn't, but of course the CSR doesn't know about CVM lists. I asked her if she sent me a new replacement, could she assure me that it would be PIN-priority? She said she could, and she sent out a replacement card. That second replacement was exactly the same as the first, with the CVM list I posted previously.
I'm not sure if they're just having production issues there or if they have deliberately decided to eliminate support for PIN-priority cards. The CSR swore to me that they do still support PIN-priority. What's odd is that there is definitely a PIN stored on the ICC, and it's the right one. There's just no CVM in the list that would ever use it.
I'm going to try writing them a secure email and see if I can get in touch with someone who might be a bit more technically knowledgeable than a standard CSR.
As an aside, I'm also not sure how much this matters any more. Due to a job change I haven't traveled internationally in nearly 4 years, and have no plans to do so. Even in the early- and mid- 2010s, when I did visit Europe frequently, I never had trouble at a manned terminal with a signature-priority card. I did encounter some transit kiosks that wouldn't take cards without offline PIN support, but during my last visit to Paris I found that even their kiosks could work without PIN now. Dutch transit kiosks, during my last visit, still required PIN somewhere in the list, but online PIN worked. Of course in the 3.5 years since I've been there, that could have changed, too.
I understand that contactless is practically universal at this point too; does anyone have a sense if that applies to unattended kiosks as well?
Adam
Originally Posted by
dmapr
I wonder if they have changed something, because on my SDFCU Platinum Rewards card that has been last issued in 2018 there's no support for online PIN other than at an ATM:
- Fail cardholder verification if this CVM is unsuccessful: Enciphered PIN verified online - If unattended cash
- Apply succeeding CV rule if this rule is unsuccessful: Plaintext PIN verification performed by ICC - If terminal supports the CVM
- Apply succeeding CV rule if this rule is unsuccessful: Signature (paper) - If terminal supports the CVM
- Fail cardholder verification if this CVM is unsuccessful: No CVM Required - If terminal supports the CVM
This list hasn't changed since the card has been issued. Also, they told me they always send a signature-preferring card when it's time to renew, you have to call them and specifically request PIN-preferring ones. That's what I did last time as well, on the cards they have sent by default the PIN was below the signature in the CVM list.