1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

My card number and expiry date printed on receipt

Discussion in 'General Discussion' started by Dav4, Dec 28, 2019.

  1. Dav4

    Mobster

    Joined: Apr 20, 2014

    Posts: 2,553

    Location: Home

    Random question to ask but I have never noticed this before when using my card to pay for something. I Was in a crappy run down restaurant before and paid by debit card using contactless.
    The guy came over with the card machine and asked for my card looked at it and said “oh is it contactless” asked me to check the amount on the machine then I scanned the card for payment. It then printed 1 receipt out which he handed over to me. It wasn’t until later I noticed the receipt was displaying my whole 16 digit card number and expiry date :confused: it also said merchant copy on the bottom. Now maybe I’ve just never noticed this before but doesn’t a receipt normally only display the last few digits of a card number? And don’t most print a customer and merchant copy out? Is this normal or does it sound dodgy?
     
  2. Monkeynut

    Soldato

    Joined: Nov 7, 2007

    Posts: 6,433

    Location: Cheshire

    Customer copy only shows last 4 digits whereas merchant shows the whole thing. Generally the merchant copy is not supposed to be given to customers. When you use contact less there is no cardholder receipt as you have not authorised with your PIN but most retailers are relaxed about giving you the merchant copy.
     
  3. Dav4

    Mobster

    Joined: Apr 20, 2014

    Posts: 2,553

    Location: Home

    Oh so it’s normal practice then for the merchant copy to show the 16 digits and expiry date? Normally in restaurants I use my pin as it’s always over £30 so maybe that’s why I’ve always got the customer copy that only displays the last 4 digits instead of the merchant copy. It’s just something I’ve never noticed before it just seems fairly unsafe showing all that information and I was slightly paranoid with it being a fairly run down restaurant in a dodgy area lol
     
  4. Monkeynut

    Soldato

    Joined: Nov 7, 2007

    Posts: 6,433

    Location: Cheshire

    Yes it's supposed to show that.
     
  5. Dav4

    Mobster

    Joined: Apr 20, 2014

    Posts: 2,553

    Location: Home

    Thanks for clearing that up I was worrying they had my full card details especially with him asking for my card first to look at and the receipt displaying my full card number. Just me being paranoid then lol.
     
  6. UnLuckyBenski

    Mobster

    Joined: Dec 28, 2017

    Posts: 4,086

    Location: London

    They do normally have all your card details... it's the merchant copy.
     
  7. Puppetmaster

    Soldato

    Joined: Jun 17, 2005

    Posts: 6,333

    Location: Near Brighton

    Its normal for the merchant copy to have those details.

    They shouldn't be giving out the merchant copy. This should be retained in case of any issues in the future. A customer card receipt can be printed from the machine if needed.
     
  8. LiamJ

    Wise Guy

    Joined: Dec 19, 2010

    Posts: 1,248

    Our merchant copies only show the last 4 digits. I was under the impression there was some gdpr regulation or something that meant keeping that kinda thing insecurely on a paper receipt wasn't allowed anymore. Might be wrong though.
     
  9. wesimmo

    Mobster

    Joined: Mar 19, 2012

    Posts: 3,069

    It wouldn't surprise me if this were true and the merchant was simply running an old terminal or software.

    IME there's always a hardcore of people who will ignore every warning letter and phone call in response to regulatory stuff so it's not unlikely.
     
  10. [FnG]magnolia

    Pancake

    Joined: Aug 29, 2007

    Posts: 26,295

    Location: Bees.

    Just LOL if you haven't had your card cloned in some dive bar in a West End town with the East End boys and West End girls.

    West End girls.

    Noobs.
     
  11. Jimbeam3678

    Capodecina

    Joined: Dec 8, 2002

    Posts: 17,542

    Location: North Yorkshire

    PCI compliance, not certain but when I was involved in this day to day I was sure card details had to be masked on physical and electronic copies at rest. At the very least it’s good practice to do so.
     
  12. mrbell1984

    Capodecina

    Joined: Aug 9, 2008

    Posts: 23,363

    For PCI Compliance in the UK card numbers must be hidden (6 digits) on the receipts. I worked in installing tills and card machines 4/5 years ago. This may or may not have changed in the last 4 years. Any store that has card numbers on the receipts I wouldn't trust them at all!

    It only takes them to photo your CSV on the back and that's it someone could take your money.

     
  13. Dav4

    Mobster

    Joined: Apr 20, 2014

    Posts: 2,553

    Location: Home

    I’m worrying again now :( is there anything anyone would recommend doing should I contact the bank or change my card etc?
     
  14. mrbell1984

    Capodecina

    Joined: Aug 9, 2008

    Posts: 23,363

    Not really - just watch your statements. You will be covered for fraud but depends on what you tell them in the end. No need to worry, you do still get companies displaying digits as long as they haven't took the CSV.

    You could change your card but personally I wouldn't. You see they could be still using an old card machine and not upgraded within the last 5 years or something. I'm not 100% sure if UK businesses have to be compliant now or not when they get issued a new card machine.

    http://www.theukcardsassociation.org.uk/security/what_is_PCI DSS.asp

     
    Last edited: Dec 29, 2019
  15. Jimbeam3678

    Capodecina

    Joined: Dec 8, 2002

    Posts: 17,542

    Location: North Yorkshire

    Thanks Mrbell, I should remember myself really as I worked with EPOS for 15 years and actually put my old company through accreditation. I was fairly sure but thanks again for confirming it.
    As for @Dav4 don't stress if it’s a standalone terminal it might be an out of date terminal. If you are really bothered go back in and see who provided the terminal. There is only a few providers Elavon, Worldpay, FIS are the ones I have worked with. Might even tell you on the receipt.....
     
  16. Dav4

    Mobster

    Joined: Apr 20, 2014

    Posts: 2,553

    Location: Home

    The receipt has RMS retail merchant services on the top
     
  17. mrbell1984

    Capodecina

    Joined: Aug 9, 2008

    Posts: 23,363

  18. Dav4

    Mobster

    Joined: Apr 20, 2014

    Posts: 2,553

    Location: Home

  19. Feek

    Commissario

    Joined: Oct 16, 2002

    Posts: 27,959

    Location: In the radio shack

    I went to one of those places earlier this year, I didn't like it. There were too many shadows whispering voices.
     
  20. neil_g

    Sgarrista

    Joined: Dec 9, 2007

    Posts: 9,924

    Location: South Hampshire

    The terminal provider would push updates for compliance. Wouldn't be reliant on the retailer.