Contactless Receipt prints whole card number and exp date

DorsetDave2

I've noticed when I use contactless with many merchants the receipt shows the whole card number along with the expiry date. Surely this isnt right and is a security risk ?


It seems to be with the smaller outlets such as cafe's. I have tried to find out about this by ringing the Money Service who gave me various numbers including the fraud people [not interested] . Also was advised to try my bank[TSB} but they said it was down to the Merchant and the card machine issuer. When I spoke to one Merchant they were surprised when I pointed it out but nothing done about it. Also some receipts I get [but not all] say Merchant Copy. Generally I've been told the receipt should only show 4 numbers and the rest would be asterisks.


We have decided to go chip and pin only now and to stop using contactless - as convenient as it is.

kensiko

Most contactless payments do not produce a customer receipt (where the whole card number is not shown)

You have probably been given a merchant copy of your receipt which does have the full number shown.

It has always been like this so you are probably OK to keep using the contactless payment system.

Link from 2015 https://unop.uk/contactless-payment-card-fraud-issue-you-might-not-know-about/

eskbanker

Yes, it's a security risk - merchants shouldn't do this, as it compromises compliance with PCI-DSS card security standards.

Your bank can't do anything about it, as it is a merchant issue, and the latter obviously shouldn't be giving you their copies, that's why multiple copies are generated, i.e. merchant copy and customer copy (which will often have less data).

Small merchants will naturally be more prone to this sort of thing than more substantial companies with more formal procedures, etc, and will typically be entirely reliant on the service and equipment of their acquiring bank or card processor, who should ensure that their devices are appropriately configured....

Other than going down the Chip & PIN route, there's not much else you can do other than not to use such establishments or not to ask for receipts (although the offending slips will still be printed and probably won't be disposed of particularly securely).

Ben8282

I always obtain a receipt for all transactions and often use contactless.
I have no recollection of ever having been given such a receipt with full card number and expiry date shown.
Can you name some of these many merchants which have provided you with such a receipt?

born_again

Sounds like they are giving you a copy of the merchants sale receipt.. Which does have full card & exp on. For their auditing purposes.

Can't see the point of paying contactless & then wanting a receipt.
If that is what you want then look at ApplePay of Google Pay which give you a copy on your phone.

Murmansk

born_again wrote: »

Can't see the point of paying contactless & then wanting a receipt.
If that is what you want then look at ApplePay of Google Pay which give you a copy on your phone.

As I understand it Google Pay (and no doubt Apple Pay) use an alternative number to that on the card so presumably this will be more secure in the situation described.

Ben8282

born_again wrote: »

Can't see the point of paying contactless & then wanting a receipt.
.

I always get one for my accounting records to keep track of my transactions.
Not interested in google pay or apple pay. Can see no reason to involve a phone and a third party in my credit card transactions. I use the physical card.

Eco_Miser

born_again wrote: »

Can't see the point of paying contactless & then wanting a receipt.

to keep track of what I am spending money on - not just how much and where.

TheShape

born_again wrote: »

Can't see the point of paying contactless & then wanting a receipt.

Using contactless where possible reduces the chances of your PIN being captured (by a device, shoulder surfing etc). It has advantages other than the speed with which a transaction can be completed.

Terry_Towelling

born_again wrote: »

Can't see the point of paying contactless & then wanting a receipt.

That's a really odd statement to make @born again. Can you explain why you say this?

Uxb1

If your purchases are going to be allowable expenses of some form - either as business expenses or perhaps as committee expenses, to be later reclaimed or set against tax then a printed receipt from the contactless transaction showing the purchase details is essential.