New answers tagged


The relevant security standard is the Payment Card Industry Digital Security Standard ("PCI-DSS"). Your financial institution likely has or could be audited under this standard. I took a quick look to see if there's anything in there about not using SMS, or how to handle PINs. 3.2.3 Do not store the personal identification number (PIN) or the ...

Top 50 recent answers are included