In 2001 my VISA card was stolen and 2100 german marks were withdrawn, entering a "correct" PIN. At that time the bank implyed, that I must have in some form given access to the PIN, otherwise it wouldn´t have been possible, that a "correct" PIN was entered at first try (prima facie evidence).
Later then in 2004 I wanted to disbale the PIN of my new VISA-card, in order to avoid what happened back in 2001. The card issuing bank told me to enter 3 times a wrong PIN. When I entered a wrong PIN, I received 500 €. In total I could withdraw 2200 € with a VISA card entering a wrong PIN !!!
From my point of view the VISA card-system is unsave. And the banks, at least in Germany, transfer the risk to their customers:
If a customer cannot prove, that he hadn´t noted the PIN somewhere, the prima facie evidence applies. Means, if a correct PIN is entered at the first attempt, the thief must have known the PIN.
If the customer can prove, that ha hadn´t noted the PIN eg. having the closed PIN letter, the bank will refund and avoid to go to court. Smart !
Detailed information of the fraud in 2001, the reaction of the bank, the litigation and the appeal at court you find at VISA 2001. And details to the withdrawals with a wrong PIN are at Wrong PIN (btw: it´s documented on video). Biometrics informs you about todays options with biometrics. And finally there are plenty of Links to media coverages, jurisdiction (in Germany) and experts.