Receipt for goods with all of the credit card

kjmpde

I am used to receipts with 12 * and the last 4 digits of the card used for payment. I never noticed at the time ( as I just checked the amount was correct.) but found an 8 month old receipt with all the 16 digits and expiry date of my debit card. The details to date have not been abused. But should I report this change from usual practice to anybody and if so to whom? 

MovingForwards

It's not unusual, quite a few retailers still do the full card number and expiry on the receipt.

eskbanker

It is, however, in breach of the industry-wide PCI-DSS security standard, and specifically requirement 3.3:

3.3 Mask PAN when displayed (the first six and last four digits are the maximum number of digits to be displayed), such that only personnel with a legitimate business need can see more than the first six/last four digits of the PAN.

While not strictly a legal requirement as such, compliance with this standard is expected by merchant acquirer banks on behalf of the card schemes, who can fine noncompliant merchants - you can obviously vote with your feet and only use merchants who take basic steps to protect your card data, while taking some satisfaction from the fact that those who are lax in this area are liable for more fraud-related costs than those who comply....

Sandtree

kjmpde said:

I am used to receipts with 12 * and the last 4 digits of the card used for payment. I never noticed at the time ( as I just checked the amount was correct.) but found an 8 month old receipt with all the 16 digits and expiry date of my debit card. The details to date have not been abused. But should I report this change from usual practice to anybody and if so to whom? 

If you are talking the card machine receipt then there are normally two versions, a Customer and Merchant; most say at the top which they are. My guess would be you were given the Merchant copy

Some_Guy

Sandtree said:

kjmpde said:

I am used to receipts with 12 * and the last 4 digits of the card used for payment. I never noticed at the time ( as I just checked the amount was correct.) but found an 8 month old receipt with all the 16 digits and expiry date of my debit card. The details to date have not been abused. But should I report this change from usual practice to anybody and if so to whom? 

If you are talking the card machine receipt then there are normally two versions, a Customer and Merchant; most say at the top which they are. My guess would be you were given the Merchant copy

Agreed.

I suspect this mistake happens more often nowadays with contactless transactions. With chip & PIN ('insert card') transactions the first things printed is the cardholder receipt, then the card machine prints the merchant receipt (for them to retain). However for contactless transactions many card machines print the merchant receipt first, and only print a cardholder receipt afterwards if requested - and sometimes, the button to press on the card machine to have a cardholder receipt printed is not obvious, so inexperienced members of staff might not be aware of it, and so they just give you the merchant receipt. (Or if the card machine is in demand, e.g. in a busy pub or cafe, the request from a customer for a cardholder receipt might come too late - i.e. the card machine is already being used for the next transaction, so again the customer is given the merchante receipt instead.)

themrnf

Some_Guy said:

Sandtree said:

kjmpde said:

I am used to receipts with 12 * and the last 4 digits of the card used for payment. I never noticed at the time ( as I just checked the amount was correct.) but found an 8 month old receipt with all the 16 digits and expiry date of my debit card. The details to date have not been abused. But should I report this change from usual practice to anybody and if so to whom? 

If you are talking the card machine receipt then there are normally two versions, a Customer and Merchant; most say at the top which they are. My guess would be you were given the Merchant copy

Agreed.

I suspect this mistake happens more often nowadays with contactless transactions. With chip & PIN ('insert card') transactions the first things printed is the cardholder receipt, then the card machine prints the merchant receipt (for them to retain). However for contactless transactions many card machines print the merchant receipt first, and only print a cardholder receipt afterwards if requested - and sometimes, the button to press on the card machine to have a cardholder receipt printed is not obvious, so inexperienced members of staff might not be aware of it, and so they just give you the merchant receipt. (Or if the card machine is in demand, e.g. in a busy pub or cafe, the request from a customer for a cardholder receipt might come too late - i.e. the card machine is already being used for the next transaction, so again the customer is given the merchante receipt instead.)

Generally, Ingenico machines running a few payment providers software do what you say, and the other half of the providers' softwares on the machines print a merchant receipt first always, then a cardholder receipt. On some older machines, like original Verifones, only a merchant receipt is printed when paying contactless. To print a cardholder receipt, you have to go into menu settings and press reprint, which then unavoidably prints a merchant receipt again, and then gives an option to print a cardholder receipt.

[Deleted User]

@themrnf you're replying to a post that's almost 3 years old, the OP @kjmpde hasn't bothered to return to their thread once, so you're unlikely to get a reply.