IVR credit card PIN entry is a thing For example - https://www.hdfcbank.com/personal/making-payments/security-measures/ivr-3d-s... On 10/10/18, 9:57 PM, "NANOG on behalf of Naslund, Steve" <nanog-bounces@nanog.org on behalf of SNaslund@medline.com> wrote: True and that should be mandatory but does not solve the telephone agent problem. Steven Naslund Chicago IL > I understand that in some countries the common practice is that the > waiter or clerk brings the card terminal to you or you go to it at the > cashier's desk, and you insert or swipe it, so the card never leaves > your hand. And you have to enter the PIN as well. This seems > notably more secure against point-of-sale compromise. > - Brian