EMV specification encourages this by requiring only
that four successive values of a terminal’s “unpredictable
number” have to be different for it to pass testing. The result
is that a crook with transient access to a payment card (such
as the programmer of a terminal in a Mafia-owned shop) can
harvest authentication codes which enable a “clone” of the
card to be used in ATMs and elsewhere