Credit card security

millsy888 · 21 Jul 2007 at 20:59

I work in an hotel, where as you can guess lots of people pay by CC. Now when people pay all the details go into the computer, then a print out is made of there requirements, e.g spa treatments and so on.

This printout goes to several departments, Sales, reservations, the spa and housekeeping. On this printout upgrades to rooms are made, fruit bowl, water and so on, but also on this sheet are the name, address, FULL CC number and expiry date of the customers card, i for one would not appreciate other people knowing the full details of my CC.

How far could someone go with the details on this sheet if it falls into the wrong hands ?

(Knowing some of the people that work there it's very possible it might)

Ak!ta · 21 Jul 2007 at 21:04

If a full CC number is recorded then they can use that card in theory...

Most places only record the last 4 digits of the card on receipts etc - to stop this. I thought it was part of some security/data protection act legislation to only record partial CC/DD numbers now?

millsy888 · 21 Jul 2007 at 21:06

thats what i thought, as all the receipts i get from shops etc star out all except the last 4 digits.

Ak!ta · 21 Jul 2007 at 21:12

Exactly.... if i stayed at your Hotel, and i recieved a bill with a full CC/DD Number printed on it, i would be talking to the manager. :mad:

millsy888 · 21 Jul 2007 at 21:16

Ak!ta said:
Exactly.... if i stayed at your Hotel, and i recieved a bill with a full CC/DD Number printed on it, i would be talking to the manager.

i haven't seen a bill yet, but i suspect that there are no CC numbers on the receipts.

Ak!ta · 21 Jul 2007 at 21:19

Extremly bad practice really.. Someone should say something about it though. In fact the manager/proprietor should really know about this ?

millsy888 · 21 Jul 2007 at 21:23

I'm going to take it up with the Duty manager on monday, hopefully this will be sorted as soon as possible.

Ak!ta · 21 Jul 2007 at 21:29

AFAIK they are required (by CC Company's/Banks, as part of their licencing grant) to take all apropriate measures to secure private/personal infrmation....

growse · 21 Jul 2007 at 23:48

For receipts and the like they star them out on the customer copy but they're printed in full on the store copy.

Tute · 22 Jul 2007 at 01:08

growse said:
For receipts and the like they star them out on the customer copy but they're printed in full on the store copy.

Yes, this is the case where I work. Customer's reciept only has the last four digits.

I'd bring it up with so many copies of the CC numbers travelling around your workplace.

Vixen · 22 Jul 2007 at 06:38

growse said:
For receipts and the like they star them out on the customer copy but they're printed in full on the store copy.

Well of course they do - the store needs a hard copy of all card transactions in case of a problem with their systems, or if a transaction is queried as fraudulent (although that's less of an issue with chip and pin).

Personally, I'd be concerned about data protection when so many copies are made, however a lot of non-chain places still have rather old systems in place for the sort of thing you describe, from times when customer not present fraud was almost unheard of.