Randomly generated pin. Not one you or anyone else knows. The transaction calls the bank and the banks pin authenticates.Didn't know that. If I have to enter a pin, then I might as well just use NFC on my phone or watch.
I look forward to a future of no passwords and pins when some sort of two-factor authentification between my phone/watch/laptop is actually more secure.