An “over PIN limit” decline means the terminal has rejected your card for one of two reasons: either you entered the wrong PIN too many times and the chip has locked, or the transaction would push you past your bank’s daily cap for PIN-based spending. The screen looks the same either way, but the fixes are different. A wrong-PIN lockout needs a reset through your bank; a daily-cap block clears at midnight or gives way if you route the card as credit.
Which of the Two Problems You Have
The message covers two unrelated situations and the terminal rarely says which. A quick way to tell them apart:
- If you entered your PIN correctly on the first try and still got the error, you’ve almost certainly hit a daily limit.
- If you fumbled the code once or twice before the decline appeared, the retry counter is the more likely culprit.
That distinction decides everything you do next, so it’s worth pausing before you try again.
How the PIN Retry Lock Works
The retry counter lives on your card’s EMV chip, not just in the bank’s system. Every wrong PIN decrements the chip’s internal counter. When it hits zero, the chip refuses to authorize any more PIN attempts, and payment processors return decline code 75. The terminal displays that as “PIN tries exceeded” or “over PIN limit.”
Three attempts is standard across most banks and card networks, though some issuers allow up to five. The part that catches people out: failed attempts stack rather than resetting on their own. Two wrong entries on Monday and one on Wednesday still locks you out on Wednesday. The counter clears only after a successful PIN entry or a manual reset by the bank.
A single careless typo at an ATM quietly costs you one of your limited tries, and you may not notice until a later transaction fails. If you’re unsure of your PIN, stop after one failed attempt and look it up rather than guessing again.
Daily Transaction Limits
Banks cap how much you can spend or withdraw through PIN-verified transactions in a single day. The caps exist to contain the damage from a stolen card, and they apply to your own legitimate spending too.
- ATM withdrawal limits at most banks run between $300 and $1,500 per day, with some premium accounts allowing more.
- PIN-based purchase limits typically range from $2,000 to $7,000 per day, depending on the bank and account type.
These caps apply per calendar day and reset at midnight. If you made a large ATM withdrawal in the morning, a smaller one in the afternoon can push you over even though each was fine on its own. The running total is what the bank measures.
You can often request a temporary or permanent increase by calling your bank, and some banks let you adjust the limit inside their mobile app. If you know a large purchase is coming, raise the cap in advance rather than negotiating it at checkout.
What to Do at the Terminal Right Now
Before you call anyone, try these:
- Run the card as credit. At many retail terminals, selecting “credit” instead of “debit” routes the transaction through the Visa or Mastercard signature network instead of the PIN network, bypassing the PIN entirely. Not every merchant offers this option and some banks restrict it, but it works often enough to try first. Your debit card carries a Visa or Mastercard logo precisely because it can process on either network; a PIN lockout blocks one but not the other.
- Use a different payment method. A credit card, a second debit card, or a mobile wallet linked to another account all sidestep the problem.
- Go to a teller. If you’re at a bank branch ATM, walk inside. A teller can process the withdrawal directly without needing the PIN.
- Try a smaller amount. If you suspect a daily-limit block rather than a PIN lockout, requesting less or splitting the purchase may go through.
How to Reset Your PIN or Unlock Your Card
Once the immediate transaction is handled, fix the underlying problem so the card works normally again. Three routes:
Through Your Bank’s Mobile App
Most banking apps now include a card management section where you can reset your PIN directly. Open the card settings, choose the PIN reset option, and set a new four-digit code.1U.S. Bank. How Do I Select or Change My ATM or Debit Card PIN Some apps also have a separate “unlock card” feature that resets the retry counter without changing your PIN.
By Phone
Call the number on the back of your card and follow the automated prompts. Most systems walk you through identity verification and then let you punch in a new code on your phone keypad.2First Fed. Pin Reset Keep the card in hand; you’ll need the full number.
At a Branch
Visiting a branch with your card and a government-issued photo ID is the most reliable route, especially if the phone and app options aren’t working. A representative can verify your identity, reset the counter, and issue a new PIN on the spot.1U.S. Bank. How Do I Select or Change My ATM or Debit Card PIN Some branches can also print a replacement card immediately if yours is damaged.
Some banks impose a waiting period after a PIN reset before the new code works everywhere. The delay can run from a few minutes up to 72 hours depending on the institution.3U.S. Bank. Why Do I Need to Wait 72 Hours to Reset My PIN If your bank enforces a delay, ask whether you can still use the card as credit in the meantime.
If Someone Else Triggered the Lockout
A lockout sometimes means someone else was trying to use your card and the security system did its job. But unauthorized transactions may have gone through before the lock kicked in, and federal law caps how much of that loss you’re responsible for.
Under Regulation E, your liability for unauthorized debit card transactions depends on how quickly you report:4Consumer Financial Protection Bureau. 12 CFR Part 1005.6 – Liability of Consumer for Unauthorized Transfers
- Report within 2 business days: liability caps at $50 or the amount of unauthorized transactions before you notified the bank, whichever is less.
- Report after 2 business days but within 60 days: liability caps at $500, though the actual amount depends on what the bank can show would have been prevented by earlier notice.
- Report after 60 days: you could be liable for the full amount of unauthorized transactions that occurred after the 60-day window closed.
The clock starts when you learn about the loss or theft, not when the transactions happened. If your card is missing and you suspect someone else caused the lockout, call your bank immediately. Once you report, the bank must investigate and generally must issue provisional credit within ten business days while the investigation is ongoing.5Consumer Financial Protection Bureau. 12 CFR Part 1005 – Electronic Fund Transfers (Regulation E)
Preventing Future Lockouts
Most lockouts happen because people second-guess themselves mid-transaction and start punching in variations. A few habits eliminate most of them:
- Store your PIN in your phone’s password manager. Never write it on the card or keep a note with it in your wallet.
- Stop after one failed attempt. Two more wrong guesses and you’re locked out, potentially for days.
- Know your daily limits. Check your bank’s app for the current ATM and purchase caps, and request an increase before you regularly bump against them.
- Turn on transaction alerts. Real-time notifications tell you immediately if someone else is using your card and help you see how close you are to your daily cap.