PP asks for pin code, am i dreaming?

[trolllol1]

im trying to link my visa card to my account and they ask me for the pin code to my visa card??? is that a joke?

[kernowlass]

@trolllol1 

Sure they don't mean CVC?

Paypal would not ask for your pin.

Are you actually doing something on paypals site or responding to an email or similar?

[trolllol1]

no, they asked for card cumber, cvc, secure number and after clicking ok they ask for pin code (password) to the card.

[kernowlass]

@trolllol1 

If you want advice then can you answer my last question?

[Gumio]

I imagine you clicked on syncing a new card, input the card number, expiration date and cvv and a small box loaded in the top-middle of the page with the name of the bank at the top and asking for a sms/mail code and the card pin, right? Then you got nothing to worry about, It's not a scam.

That's a request the bank is making through PayPal to verify you are the one making the request (in case you didn't notice, the sender of the sms/mail is not PayPal, but the bank the credit card is from). Let's say that box is blank at first, then PayPal notifies the bank of the request (in my case, as a 0.00 transaction), and in response the bank proceeds with the verification. It is sort of a mix between the verification procedures that occur when you make an online transaction (sms/mail) and through a credit card reader in a supermarket (card pin).

Although I don't know the reason why PayPal acts as the middleman instead of waiting for the bank to confirm that you verified your identity by doing the exact same thing PayPal is asking you to do but directly with the bank like in any other page or application when you make a purchase, I can tell you that I've never had issues because of It. I synced a credit card years ago, It has always worked fine and I've never encountered any issues, and I just linked a new one recently and was able to make a purchase today with the new card without issues. It is still very possible that you are giving them the pin though, since you don't need any form of verification besides successfully logging in to the PayPal account in order to make a purchase through It, although that could also be due to an agreement between PayPal and the bank in which you gave consent for PayPal to request purchases on your behalf when syncing the card.

If you still want to be better-informed, best would be for you to ask them directly. I'm only giving my 2 cents.

[kernowlass]

@Gumio 

The original poster clearly stated that as well as CVC they asked for the pin number, paypal do not ask you that so that is why I asked if they were just responded to an email (possible spoof) rather than entering information on their paypal account.

[Gumio]

I understand that. It's just that what he described matches the procedure through which you sync a new card, and he said he went to link a visa, not that he was told to do so by PayPal through an external message, and him saying that PayPal asked him for the pin only confirms that he was in a page he concluded was PayPal and there was an input tag labelled pin, but It doesn't confirm whether or not said information will be sent to PayPal or other parties or anything else past that. During the procedure, PayPal communicates with the banks API endpoint (like the link we use to load this page, but for middle/back-end requests in this case), and APIs return ResponseEntities almost always, which can contain anything, including html code. In this case, even if there is a box in a PayPal page labelled pin that must be filled before confirming, PayPal isn't the one asking for the pin, but the corresponding bank through an API response It has sent to PayPal. That's why I started the reply with an assumption and a confirmation. If the assumption is incorrect, then the comment can be pretty much ignored.

But you are correct, my interpretation of what he said is just that, an interpretation. Confirming whether or not he started the procedure through the website itself or an external link requesting him to do so takes preference over an explanation stemming from an assumption.