Four Digits, Thirty Vans: The Fuel-Card PIN Audit That Pays for Itself

Fuel cards are usually introduced to simplify administration. They remove cash, reduce receipt handling and give the finance team a single monthly statement. The PIN, however, is where that convenience meets control. In many UK van fleets, the PIN is still shared across a depot, written inside a cab or issued as a generic number that everyone knows. The practice is understandable: it keeps vehicles moving when agency cover arrives or a regular driver is off sick. It also makes the card harder to defend when a transaction is questioned.

A fuel-card PIN is not a depot password. It is the link between a specific transaction and a specific driver. Once that link is broken, the card statement becomes a list of purchases rather than an accountable record. For a 30-van fleet spending around £75,000 a year on diesel, that distinction matters well beyond the fuel line in the budget.

Why shared PINs survive in otherwise controlled fleets

Shared PINs rarely come from indifference. They come from operational pressure. A depot manager keeps a laminated card in the office so that any driver can fuel a vehicle after hours. A transport supervisor issues a temporary PIN to cover holiday absence and never resets it. A vehicle is shared between two shifts, so the PIN is treated as part of the vehicle rather than the driver. Each decision solves a small immediate problem and creates a larger control gap.

The gap is not usually visible in the monthly total. Fuel spend moves with mileage, weather and price, so a few unexplained transactions can disappear into normal variation. The problem surfaces when a card is lost, a driver leaves, or a transaction is disputed. At that point the fleet needs to show who was at the pump. A shared PIN makes that answer difficult.

The five tests in a fuel-card PIN audit

A useful audit does not need a consultant or a week of workshops. For a 30-van fleet it can be completed in a working day, provided the fuel-card provider's reports are available.

1. PIN custody register. List every active card, the assigned driver, the vehicle or pool it serves, and whether the PIN is known only to that driver. Include agency and temporary drivers. If the register cannot be completed from records, the control is already weak.

2. Transaction-to-driver reconciliation. Take the last full month of transactions and match each fill to a driver, vehicle, date, mileage and location. Look for fills that cannot be tied to a person, fills on a vehicle that was off the road, and multiple fills on the same card within a short period.

3. Alert configuration. Check what the provider is actually set to flag. Many fleets have alerts available but not enabled. Useful thresholds include a single transaction above the vehicle tank capacity plus a margin, more than two transactions in 24 hours, weekend use, out-of-area use, wrong fuel grade, and several cards used at the same site within a short window.

4. Forecourt skimming exposure. Review driver guidance for card handling at the pump. Skimming devices and shoulder-surfing remain a practical risk at UK forecourts, particularly at less familiar sites. Drivers should check the card reader before use, shield the keypad, avoid leaving cards in vehicles and report anything unusual. A shared PIN makes a skimmed card more valuable because more people know the number.

5. Leaver and vehicle-change process. Test what happens when a driver leaves, moves depot or changes vehicle. The card should be blocked or reassigned, the PIN reset, and the change recorded. The same applies to written-off or sold vans. A card linked to a vehicle that no longer exists is an obvious exception waiting to happen.

Costing the realistic exposure for 30 vans

Assume 30 light commercial vehicles, 32 active cards including two pool cards, and annual diesel spend of about £75,000. The direct fraud loss from a single compromised card is not enormous in isolation: a 70-litre fill at around £1.48 per litre is roughly £104. Three fills across a weekend could reach £300; a card used repeatedly before Monday's reconciliation might reach £700 to £900. The larger cost is the uncertainty that follows.

If the PIN is shared, the fleet may be able to identify the card and the vehicle but not the driver. That weakens the ability to challenge the transaction, recover the cost or take disciplinary action. A disputed incident can easily consume ten to twenty hours of management and finance time. At a fully loaded internal rate of £35 per hour, that is £350 to £700 before any fuel is written off. Add the possibility of a blocked card disrupting a driver's day and the operational cost rises further.

A more common leakage is not dramatic fraud but quiet misuse: personal fills, wrong-grade purchases or fuel for a non-fleet vehicle. On a £75,000 fuel bill, a 3% leakage is £2,250 a year. Shared PINs make that leakage harder to see and harder to stop. The audit's purpose is not to assume the worst of drivers; it is to make the honest majority easy to defend.

Fixes that do not slow the pump

The objection to unique PINs is usually time. In practice, a four-digit PIN adds a few seconds to a transaction that already involves inserting a card, selecting a pump and lifting a nozzle. The real delay comes from poor exception handling, blocked cards and drivers queueing at a depot terminal because the process is unclear.

Start with the provider settings. Enable transaction alerts and velocity limits. Set a daily transaction cap per card where the provider supports it. Use vehicle or driver tags where available, and require odometer entry at the pump if the system allows it. For agency drivers, issue a temporary card with an expiry date and a lower limit rather than sharing a permanent PIN.

Then tighten the routine. Send a daily exception report to one named person, not a weekly statement to a shared inbox. Reconcile fuel transactions against telematics location and mileage within two working days. Investigate exceptions consistently, including small ones, so that the process is seen as normal rather than accusatory. Keep PINs out of cabs, laminated sheets and group messages. Reset them on issue, on return and on any suspicion of compromise.

A 30-day sequence

In week one, pull the active card list and the last month of transactions. Identify shared PINs, leavers and pool cards. In week two, reset PINs, enable alerts and brief drivers on card handling at the forecourt. In week three, run the first exception review and test whether the alerts are producing useful signals rather than noise. In week four, refine thresholds and confirm that the leaver process works.

The measure of success is not a dramatic fraud investigation. It is a cleaner ledger: fewer unexplained transactions, faster dispute resolution and a fleet that can answer the basic question of who was at the pump. For 30 vans, one avoided compromise or one resolved attribution case can cover the management time involved. The PIN is a small control, but it sits at the centre of fuel-card security.