Your PIN arrives separately from your card, usually by mail within a few days

When you receive a new credit card, your personal identification number (PIN) comes in a different envelope from the card itself — this is intentional security. The card issuer (your bank or credit card company) mails them separately so that if one envelope is lost or stolen, a thief cannot use both pieces together.

Most issuers send the PIN in a sealed, security envelope marked "confidential" or similar. It arrives within three to seven business days after your card. Some banks let you set your own PIN online or through their app before the card even arrives, which means you skip the mail step entirely.

If you have not received a PIN after two weeks, contact your card issuer's customer service number on the back of your card or on your statement. They can confirm whether it was mailed, resend it, or let you create one yourself right then.

Key Takeaways

  • Your PIN arrives in a separate mailing from your card for security reasons, usually within three to seven business days.
  • Many card issuers let you create your own PIN through their website or mobile app instead of waiting for mail.
  • If your PIN does not arrive within two weeks, call the customer service number on your card or statement to request a resend or create one immediately.
  • You need your PIN to withdraw cash from an ATM using your credit card, but not to make purchases in stores or online.
  • If you forget your PIN, you can reset it by calling customer service, logging into your online account, or visiting an ATM and following the "forgot PIN" option.

When you actually need to use your credit card PIN

A credit card PIN is not the same as a debit card PIN. You only need it in one situation: withdrawing cash from an ATM. When you swipe or insert your credit card at an ATM and request cash, the machine asks for your PIN to confirm you authorized the withdrawal.

You do not need a PIN to make purchases at stores, restaurants, gas stations, or online. You do not need it to pay your bill. The PIN exists only to protect cash withdrawals, because those are the transactions most vulnerable to theft if someone steals your card.

Some credit cards do not offer ATM cash withdrawals at all, or they charge a fee or higher interest rate for them. Check your card's terms or call customer service to confirm whether your card can withdraw cash and what it costs.

Setting up your own PIN online or through the app

Most major card issuers — including Chase, Bank of America, American Express, Discover, and Capital One — let you create or change your PIN through their website or mobile app without calling anyone. This is faster than waiting for mail and gives you a number you will actually remember.

Log into your online account or open the issuer's app, look for a section labeled "Card Settings," "Manage Your Card," or "Security," and find the option to set or change your PIN. You will need to verify your identity (usually by answering security questions or entering a code sent to your phone). Then you choose a four-digit number and confirm it.

If you cannot find the PIN option in your account, call the customer service number on the back of your card. They can walk you through it or create one for you over the phone, and it takes about five minutes.

What to do if your PIN arrives but you forget it

Forgetting your PIN is common and easy to fix. You have three options: call customer service, reset it through your online account, or use the ATM's "forgot PIN" feature.

The fastest route is usually your card issuer's app or website. Log in, go to card settings, and select "reset PIN" or "change PIN." You will verify your identity and create a new one on the spot. This takes two to five minutes and your new PIN works immediately.

If you prefer to call, use the customer service number on the back of your card or on your statement. Have your card and a form of ID ready. The representative will verify your identity and either reset your PIN over the phone or mail you a new one.

At an ATM, some machines offer a "forgot PIN" or "reset PIN" option on the main menu. Select it, enter your card, and follow the prompts to verify your identity (usually by answering security questions). If your ATM does not have this feature, you will need to use the phone or online method instead.

Why your PIN is mailed separately and how to keep it safe

Card issuers mail your PIN separately from your card because of a security principle called separation of credentials. If a thief steals your card but does not have your PIN, they cannot withdraw cash from an ATM. If they somehow get your PIN but not your card, it is useless. Separating them makes both pieces harder to abuse.

When your PIN arrives, treat it like a password: memorize it and destroy the paper it came on. Do not write it down, do not store it in your phone, do not tell anyone. If someone asks for your PIN — even someone claiming to be from your bank — hang up or close the app. Your bank will never ask for your PIN.

If you suspect someone knows your PIN, reset it immediately through your online account or by calling customer service. A new PIN takes effect right away and the old one stops working.

PIN versus CVV: what each one protects

Your credit card has two security numbers, and they do different jobs. Your PIN (the four-digit number you set) protects ATM cash withdrawals. Your CVV (the three-digit code on the back of your card) protects online and phone purchases.

You enter your CVV when you buy something online or over the phone — it proves you have the physical card. You enter your PIN only at an ATM. They are not interchangeable, and you should never share your PIN with anyone, even if they ask for your CVV.

Some cards also have a four-digit code printed on the front (usually next to your name). That is not your PIN — it is part of your card number. Your actual PIN is the one you set or received in the mail.

What happens if your card arrives but no PIN follows

If two weeks pass and you have not received a PIN, it may have been lost in the mail, or your issuer may have sent it to an old address. Call the customer service number on the back of your card or on your statement.

Tell them your PIN has not arrived and ask whether they can confirm the mailing address on file. If the address is wrong, update it and ask them to resend. If the address is correct, they can resend it to the same place or offer to create one for you right then over the phone.

Some issuers also let you request a PIN resend through your online account. Log in, go to card settings, and look for "resend PIN" or "request PIN by mail." This usually takes three to seven business days.

Frequently Asked Questions

Do I need a PIN to use my credit card in a store?

No. You only need a PIN to withdraw cash from an ATM. In stores, you swipe or insert your card and sign, or you tap it for contactless payment. Online, you enter your card number, expiration date, and CVV — never your PIN.

Can I change my PIN whenever I want?

Yes. You can change your PIN as often as you like through your online account, mobile app, or by calling customer service. The new PIN takes effect immediately. This is useful if you think someone might know your current PIN or if you just want a number that is easier for you to remember.

What if I set a PIN but then forget it before I ever use it?

Reset it the same way you would if you had used it and forgotten it: through your online account, app, or by calling customer service. You can create a new PIN right away without waiting for mail.

Is my PIN the same as my online banking password?

No. Your PIN is for ATM withdrawals only. Your online banking password is for logging into your account on the website or app. They are separate, and you should never use the same number for both.

What if someone asks me for my PIN over the phone or email?

Hang up or delete the message immediately. Your bank will never ask for your PIN by phone, email, text, or any other method. If you are unsure, hang up, look up the official customer service number on your card or statement, and call them back yourself to verify.