Revealing PIN online increases cyber crime risk

I laud the move by banks that allow customers to reserve time slots online for the exchange of new notes, which would save time.

But I found out during registration that I would not only have to key in my ATM/debit card number, but the PIN as well. While I understand the need to input a valid card number to prove that I am a genuine customer, I question the need to input my PIN as I would need to be present to draw funds for the new notes when the time comes.

The banks probably feel that the transaction is akin to an online purchase and requires security protocols. Yet, with increasing cyber crime threats, do we need to provide details like PINs in a situation where it is unnecessary?