Credit Card PIN & PAY – Frequently Asked Questions (FAQ)

1. What is a PIN & PAY card?

PIN & PAY card is a PIN - enabled card that allows you to make purchase by keying in a 6-digit PIN,
with no signature required. It is an enhanced payment method and will make an already safe
payment system even more secure. Changing to PIN & PAY payment method is an industry-wide
initiative mandated by Bank Negara Malaysia.

2. What is a PIN?
A PIN, or Personal Identification Number, is a secret code selected by you to prove that you are the
rightful holder of the card. The PIN for CIMB Bank/CIMB Islamic credit cards issued in Malaysia
consists of six digits. Your PIN must always be kept secret and never noted down or exposed
anywhere or disclosed to anyone.

3. Why is PIN & PAY safer than signing?

With both your card and 6-digit PIN selected by you, signature verification will no longer be required.
As the PIN is known only to you, you have greater protection against fraud if your card is lost or
stolen. So remember, keep the PIN a secret!

4. Why do I need to receive a new card to use PIN?

You will be issued a new PIN & PAY card because your current card does not support PIN for
payment. From 1 January 2017 onwards, all payment terminals in Malaysia will only accept PIN &
PAY cards.

5. When will I get my PIN & PAY card?

We will be issuing PIN & PAY cards in phases in 2016 to replace the current cards. In the meantime,
you may continue using your existing card until your replacement card is received.

6. Can I request a PIN & PAY card sooner?

No, there is no need to call in to request for a PIN & PAY card as the transition to PIN & PAY cards
is an automated process.

7. Can I continue using my existing card after I have received my PIN & PAY card?
Your existing card will be deactivated 90 days after your new PIN & PAY card is issued. Please
activate and use your PIN & PAY card once you receive it to avoid any interrupted service.

8. Do I need to pay additional fees to get a new PIN & PAY card?
No additional fees will be charged for the first issuance of your new PIN & PAY card.

1
9. I just received my renewal card in October 2015, when is the latest that I will receive my PIN &
PAY card?
You will receive your PIN & PAY card by January 2017, at the latest.

10. What if I don’t receive my new PIN & PAY card by January 2017?
It may be that your existing signature-based card is not activated. To receive your new PIN & PAY
card, please call the number on the back of your card.

11. How will the new card be delivered to me?

Your new PIN & PAY card will be delivered to you via normal mail or courier drop, depending on
your current credit card.

12. What do I need to do once I receive my PIN & PAY card?

You must ACTIVATE your card according to the instructions accompanying your new card. If you
have registered your mobile phone with the bank, you will receive your Temporary PIN via SMS. You
must then change the Temporary PIN to your Personal PIN.

13. What if I haven’t registered my mobile phone number with the bank?
You will receive your Temporary PIN in a PIN mailer which you must change to your Personal PIN.

14. How do I change my Temporary PIN?

You can do so via 2 options:
CIMB BANK/CIMB ISLAMIC ATM or
CIMB Clicks (www.cimbclicks.com.my)
You are strongly advised to change the Temporary PIN to a 6-digit PIN that is known only to you.

15. Is the PIN I use for making purchases the same as the PIN used to withdraw cash at ATMs?
Yes, each card will have only one PIN and can be used for both points of sales (“POS”) for
purchases and cash withdrawals at ATMs. Instructions on how to activate your PIN and card will be
sent together with the new card.

16. Am I allowed to use the same 6 - digit PIN for my other CIMB credit cards or CIMB Debit
MasterCard?
Yes. You may use the same 6 - digit PIN for your other CIMB credit cards or CIMB Debit
MasterCard. Do note that you need to change PIN for all your CIMB cards separately at our ATMs or
CIMB Clicks.

17. Will the PIN be used to make purchases online or over the telephone?
No, the PIN that you use for POS transactions and at ATMs must never be entered online or
disclosed over the telephone.

2
18. What happens if I use my PIN & PAY card at a point of sales terminal that doesn’t support
PIN? I’ve noticed that some local and overseas terminals do not accept the PIN payment
method.
At POS terminals that do not support PIN including local and overseas terminals, your signature will
be required to verify your transaction. Please ensure you sign on your new PIN & PAY card as soon
as you receive it.

19. What happens if I travel abroad without a PIN, and I am prompted for a PIN when I make
payment with my new PIN & PAY card?
If you travel abroad without a PIN and are prompted for a PIN, please request for the retailer to
bypass PIN verification for signature verification. However, we highly encourage you to activate your
new card and change your temporary PIN to a Personal PIN soonest possible as some countries
may require payment to be completed with a PIN instead of a signature, and there is a risk of your
card being rejected if you do not enter a PIN when prompted. This is why you must ensure that you
have activated your new card and the PIN is changed before leaving Malaysia.

If you happen to forget your Personal PIN when travelling abroad, please contact the number on the
back of your card to reset your Personal PIN.

20. I have seen a few overseas terminals that restrict PIN entry to only 4 digits. How do I
complete my transactions at these terminals with my new PIN & PAY card?

Although the standard for payment card PINs in Malaysia is 6 digits, the standard in many overseas
markets is 4 digit PINs. It is possible that if you travel overseas with your new PIN card and a 6-digit
PIN, you may encounter a problem using your card at an overseas terminal if the terminal restricts
PIN entry to 4 digits. As a result of international card scheme rules, examples of point of sale
terminals that do not support PIN lengths of greater than 4 digits, even in markets where the
standard for PINs is 4 digits, should be limited. However, if you strike a terminal that restricts the
entry of a PIN to 4 digits, then you have two choices.

 The first is to ask the retailer to bypass the PIN entry and sign.
 If this is not possible, or the retailer refuses to allow signature, then you must opt for a
different payment method.

21. How will I know when a PIN is required at the point of sales terminal?
The point of sales terminal will determine if PIN is required or not. If PIN is required, it will ask for
PIN. All you need to do is to follow the prompts on the terminal.

22. Do I need to enter a PIN whenever I use my card at a self-service kiosk or terminal in
Malaysia?
If the self-service kiosk or terminal supports PIN, it will prompt you to enter a PIN when you insert
your card into the terminal. If the terminal asks you for a PIN, you need to know your PIN and you
must enter the PIN to complete the transaction. If you do not know your PIN, or if you do not have a
PIN enabled card, you will not be able to use your card at a self-service kiosk or terminal that
supports PIN. An example of a self-service terminal is the payment terminal in an outdoor self-
service pump at a petrol station.
Although it is possible to sign at an attended terminal if you do not know your PIN until 1 July 2017,
this is not possible at a self-service terminal because it is not attended i.e. there is no cashier or

3
 operator to verify the signature. This is why you must always enter your PIN if the self-service
terminal supports PIN.

23. Do I need to enter my PIN whenever I use the card in Malaysia?

No, not all transactions at point of sales will need PIN:
 Contactless credit card transactions below RM250 do not require PIN
 At a terminal that does not support PIN, your signature will be required

24. What happens if I enter the wrong PIN?

You will be allowed three (3) attempts before your PIN is blocked. Limited PIN tries protects you
against the possibility of a criminal act using your card. If your PIN becomes blocked, please contact
us to receive a new Temporary PIN. You may call the number on the back of your card or visit CIMB
Clicks.

25. What happens if I forget my PIN?

Before 1 January 2017, signature will still be allowed when using your new PIN & PAY card. If you
cannot remember your PIN while transacting at an attended terminal, the retailer will assist you to
complete your transaction using signature. After 1 January 2017, you will no longer be allowed to
use your card at a POS terminal in Malaysia without your PIN.

As a security measure, you must enter your PIN at automated fuel dispensers and other unattended
terminals if you are prompted for your PIN, even before 1 January 2017. If you forget your PIN, you
will not be able to use your card at these unattended terminals.

If you do forget your PIN, please contact us to receive a new Temporary PIN. You may call the
number on the back of your card or visit CIMB Clicks..

26. How do I keep my PIN secure?

It’s very important that you keep your PIN secret to protect against fraud should your card be lost or
stolen. Here are some ways to have a PIN that is not easily guessed:

DO NOT:

 use numbers that are associated with you, such as your birthdate, telephone number or
identity card number;
 keep a written record of your PIN;
 allow another person to see your PIN when you enter it;
 disclose your PIN to anyone including your family members;

DO notify CIMB Bank/CIMB Islamic immediately if you become aware that your PIN has become
known to someone else.

27. What is the “WiFi” icon on the credit card?

4
 It means your credit card comes with Contactless feature. You can simply tap or wave the card on
contactless enabled card reader to make payment.

28. How do I use my card for contactless transactions?

After your card is tapped or waved on contactless enabled card reader, the terminal will prompt for
PIN for card transactions above RM250. Contactless transactions below RM250 will not require PIN.
The RM250 limit however is subject to change.

29. What about supplementary card? Will they be changed too?

Yes. All the supplementary cards linked to your current principal card will be changed to the new PIN
& PAY cards.

30. Will I receive my principal/supplementary cards together?

The transition to PIN & PAY cards is done in batches and you might not receive all your
principal/supplementary cards at the same time.

31. What about supplementary cardmembers and their PIN?

The new PIN & PAY supplementary cards will be sent to the principal cardmember’s address that is
registered with the bank. The supplementary card’s Temporary PIN will be sent to the principal
cardmember, after which, the cardmember must change the Temporary PIN to a Personal PIN.
Please note, changing the Temporary PIN for supplementary cards via CIMB Clicks, can only be
performed through the principal cardmember's CIMB Clicks account.

32. Will I receive an upgrade for my new PIN & PAY card?
Depending on your current credit card, you may receive an upgrade for your new PIN & PAY card.
For customers that receive an upgrade to their PIN & PAY card, do take note that you will receive a
new credit card number and this may be reflected in CIMB Clicks or your account statement before
you receive your new card.

33. Will my current credit limit be increased?

No. Your new card credit limit will remain the same as per your current card.

34. My current card is registered for auto-billings/ standing instructions/ insurance/ IPP. Do I
need to change them manually?
No. As such, all your current auto-billings/ standing instructions/ insurance/ IPP will be transferred
automatically to your new card.

35. My current card is tagged with Touch `n Go Zing card. What do I need to do?
Your Touch `n Go Zing card will be transferred automatically to your new card upon card activation.
If there is no activation after 90 days, the auto reload of Zing card will be temporarily blocked. Once
you activate your new card, kindly allow 2 working days to enable the Zing card auto reload.

5
36. What will happen to my new credit card if I fail to activate it within 90 days?
The new credit card is still valid to be activated. However, to avoid any of your transactions being
declined you are highly encouraged to activate your new card immediately once you received it.

37. Do I need to call up Call Centre for replacement card or can I go to the branch to activate it
after 90 days?
No. Please follow the instructions on the card carrier for steps on how to activate your card as well
as PIN change.

38. I have accumulated bonus points with my current card. What will happen to all the bonus
points with the new card?
All your existing bonus points will be transferred to your new card. This applies only to the following
cards (CIMB Visa Platinum, CIMB Platinum MasterCard, CIMB Visa Signature & CIMB World
MasterCard).

39. The credit card I have now is linked to my current/savings account, which I can use like an
ATM/debit card for my daily banking needs. With this new PIN & PAY credit card, can I
continue to enjoy this service?
No, the new PIN & PAY credit card can no longer be linked to your current/savings account.

40. Can I disable the ATM cash withdrawal function for the new card?
No, you can’t disable this function as the new PIN & PAY credit card has cash withdrawal as a
standard feature.

Card Pre – authorization at Petrol Station Self – Service Pump

41. What happens when I use my credit or debit card at a self-service pump?
When you use your card at a self-service pump (automated fuel dispenser) at a petrol station, the
self-service pump will authorise the fuel transaction before you can start pumping fuel into your
vehicle. This is performed by sending a pre-authorisation amount on the payment card to your card
issuer.

42. What is a pre-authorisation?

A pre-authorisation is a temporary hold of a specific amount from the available balance on the
payment card. It is used to verify that the card is active and has sufficient available funds prior to
dispensing fuel.

43. What amount will be pre-authorised on my card when using a self-service pump?

6
 Because the pre-authorisation must happen before the fuel is pumped, the actual amount of fuel
pumped is not yet known at the time of the pre-authorisation. The agreed pre-authorisation amount
at self-service pumps in Malaysia is set to RM200.

44. What if the amount of fuel pumped is less than the pre-authorised amount?
The amount of the pre-authorisation is not a charge and no funds are debited from the card account,
but the available balance on the card is temporarily reduced by the pre-authorisation amount. Once
you have completed pumping fuel, the actual amount for the fuel dispensed will be sent to your
issuing bank. At this point the actual amount will be debited from the card account, and the pre-
authorisation amount will be cleared. The pre – authorisation amount may take 3–4 business days
to clear after the fuel was dispensed and the pre-authorisation was generated.

45. What if my available funds are less than RM200 or if I want to avoid a RM200 hold of funds on
my card?
Customers who want to avoid a pre-authorisation at self-service pumps are advised to go to the
cashier where the exact purchase amount would be deducted from the cardholder’s account.

Contactless Feature on Your Pin & Pay Card

46. Could I unknowingly have made a purchase via my contactless card if I walk past a
contactless card reader?
No. Your contactless card has to be waved / tapped at the contactless card reader and the merchant
must have first entered the transaction amount for you to approve.

47. Is there a chance that payments may be taken twice if I accidentally wave / tap my
contactless card twice at the contactless card reader?
No. The contactless terminal can only process one transaction at a time. Even if your contactless
card is accidentally tapped more than once, you will only get billed once for the transaction.

48. Could my contactless card details be intercepted and read by fraudsters through a
contactless card reader in close proximity to the contactless card in my wallet?
The information in the chip of your contactless card only includes the contactless card number and
its expiry date, the contactless card account number and a unique dynamic code changes after
every in-person transaction. The unique dynamic code is different from the one encoded on the
magnetic stripe of your contactless card. So, if a fraudster attempts to use the intercepted data to
manufacture and use a counterfeit card, the Bank would be able to identify the transaction as
fraudulent.

49. What happens if I have more than one contactless card in my wallet and I tap my wallet on
the contactless reader?
If you hold your card up to a reader and you have any other contactless payment cards nearby, the
reader might detect more than one card and won’t complete the payment. You will need to do the
transaction again.

You should make sure you only hold one card on the reader and always take it out of your wallet.

7
50. Would my contactless card account be charged if a fraudster places a contactless card
reader in close proximity to the contactless card in my wallet (electronic pickpocketing)?
Safeguards are in place to prevent unauthorized use of the intercepted card security details. Each
contactless transaction includes a unique code that changes with each purchase, which can only be
used once and can only be generated by the chip in your original contactless card, hence prevents a
counterfeit card from being produced from the intercepted card security details.

In the unlikely event money is taken from your contactless card account due to the unauthorised use
of your contactless card, such unauthorised payment is traceable by the Bank.

51. Could a fraudster steal my contactless card and use it to empty my contactless card
account?

No, your contactless card account is protected. Each contactless transaction (i.e. transaction by
waving / taping your contactless card on the contactless card reader) is limited to RM250. For
transactions above RM250, you need to sign (only applicable till 1 January 2017) or enter your PIN
to approve the transactions. There are fraud controls that would deal with the unauthorised
transactions based on certain threshold set by the Bank.