Square uses the CVC number on the back of the card as a pin for this currently. It's not the most secure way to handle it imo, but it does stop the general user from picking up a phone and stealing all their money from snapchat (if this feature carries over to snapcash).