The following image shows a PIN entry device which shuffles the digits.
. via twitter
I’ve seen this question, but it doesn’t cover why companies are still doing this.
I looked at the POS PIN Entry Device and the Software-based PIN Entry on COTSSecurityRequirements requirements and neither of them seems to have anything about shuffling the digits.
Is there a requirement or specification that I’m missing?