Free email client suggestions

[Rick]

Although the whole thing looks dodgy with a PIN being needed for an on-line purchase 

You should never need your PIN for an online purcase. It should only be needed when your card has been plugged into an EPOS reader. Any online site asking for your PIN is up to no good.

Or does the card number and "security number" tie in with the PIN - to a retailer ?

The "security number" should be printed on the back of the card, and is usually required for online transactions. The theory is that it should be sent to the card provider (as a check that the purchaser has the physical card in hand) when verifying the transaction, but not recorded for future use. Then, if the retailer's data is stolen there's still one bit of information missing. Sometimes, theory doesn't match reality...

Any site asking for both PIN and security number is definitely up to no good.

[Ian]

just to be clear, there is never a reason to use your PIN online. It's is physically tied to the card and is merely a way of tying you as a person to that particular card.

The security number is a different animal entirely and is part of the number printed on the back of the card. It's supposed to validate the fact that you have the physical card in your posession, but seeing as now the world and their dog ask for it, it's merely an embuggerance and does nothing to enhance the security of the card. I'm sure that, like chip and PIN, the banks will find a way of shirking their responsibilities in ensuring your security with it though.