Banks will never ask for your pins or passwords, and legitimate retailers shouldn’t ask you for pins or passwords either. It’s pretty much a sure sign someone’s trying to rip you off.