online.wsj.com— As of Dec 4th, 2006, it's illegal for a retailer to print more than five digits of your credit card on your receipt. Retailers who persisted are getting hit in a recent whirlwind of class-action lawsuits.
May 3, 2007View in Crawl 4
@brpyne - You are seeing it from the wrong end here. Of course there are more than 7 digitis on a CC, however, knowing those 7 digits, and not knowing the first does not equate to 100,000,000,000 remaining possibilities. The reason is, the first 6 digits out of the total of 16 digits (most common) are the same per bank (or unique branch, etc.) called Issue Identifier, leaving us with (16 minus 6, minus 7 = 3). One of the 3 remaining is a check-sum digit. So, as you can see, you can "think-of" a credit card as only being 7 digits in length, due to that is the account number, if you know a list of Issue Identifier numbers, you're chances of guessing the reminging digits are very high. What I do, when I sign, I use the pen to censor any remaining digits on each copy, especially the one I sign, and give back to them. Simple enough and has worked for me.
I've worked in the field of high tech crime detection and I wrote some software that "guesses" the remaining digits of a credit card based on the few that you can get. Depending on the variations and quantity of numbers given, it's possible to round the card down to just 1 card number from a possibility of over 10,000 in some cases (usually a discover card). There shouldn't be any numbers on a receipt. A code linked to and identifying the card but not being used for actual spending would be useful. It would identify the card used but not the numbers used for purchases. It's ridiculous that receipts contain any card numbers nowadays but still some places even print the entire string.
At last. This is a very long overdue measure which will protect people from fraud. I've thought for the last 15 years that credit card receipts were absurdly insecure, making it trivially easy for someone to get all the important details.
I will never understand why people who are so worried about identity theft use plastic for trivial expenses. I work at a restaurant. Do people realize how aggravating it is for a table of eight to all drop their credit cards on you for eight separate $10 purchases? Get some cash before you go out. They can't steal you identity if you use cash and you are much less of a nuisance.
Just so I'm clear...does that mean the merchant NEEDS to keep your full CC and expiration date on their receipt? (not being in the industry) I always assumed the transaction could be revisited with the authorization number or transaction number if their was a problem...that the merchant having a copy of the CC number was not necessary.
although, some consumers won't agree with u, but i do. maybe because i own a restaurant too, but it would be quicker to use cash for small amount such as lunch. the lunch buffet in my restaurant is 7.25 with tax and more than half of my customers use their CC, which would be faster for the cashier if they use cash.
The merchant would only need the imprint full if manually needed, otherwise if the POS sys is working, transaction numbers are used to handle CBs - NOT the Exp date and NOT the full CC# - , and the law applies to POS systems as well, now.However, there is that case pending, so Zen Master says:
specopsMay 5, 2007
@brpyne - You are seeing it from the wrong end here. Of course there are more than 7 digitis on a CC, however, knowing those 7 digits, and not knowing the first does not equate to 100,000,000,000 remaining possibilities. The reason is, the first 6 digits out of the total of 16 digits (most common) are the same per bank (or unique branch, etc.) called Issue Identifier, leaving us with (16 minus 6, minus 7 = 3). One of the 3 remaining is a check-sum digit. So, as you can see, you can "think-of" a credit card as only being 7 digits in length, due to that is the account number, if you know a list of Issue Identifier numbers, you're chances of guessing the reminging digits are very high. What I do, when I sign, I use the pen to censor any remaining digits on each copy, especially the one I sign, and give back to them. Simple enough and has worked for me.
fight4yourrightMay 5, 2007
Try Life Lock<a class="user" href="http://www.lifelock.com/default.aspx?promocode=Shareasale&SSAID=186740">http://www.lifelock.com/default.aspx?promocode=Shareasale&SSAID=186740</a>
flippinjeremyMay 5, 2007
How would someone report a company/store that still violates this law? Who should I call/email, etc?Any advice?
pixelvisionMay 5, 2007
I've worked in the field of high tech crime detection and I wrote some software that "guesses" the remaining digits of a credit card based on the few that you can get. Depending on the variations and quantity of numbers given, it's possible to round the card down to just 1 card number from a possibility of over 10,000 in some cases (usually a discover card). There shouldn't be any numbers on a receipt. A code linked to and identifying the card but not being used for actual spending would be useful. It would identify the card used but not the numbers used for purchases. It's ridiculous that receipts contain any card numbers nowadays but still some places even print the entire string.
mottersMay 5, 2007
At last. This is a very long overdue measure which will protect people from fraud. I've thought for the last 15 years that credit card receipts were absurdly insecure, making it trivially easy for someone to get all the important details.
goudiMay 6, 2007
I will never understand why people who are so worried about identity theft use plastic for trivial expenses. I work at a restaurant. Do people realize how aggravating it is for a table of eight to all drop their credit cards on you for eight separate $10 purchases? Get some cash before you go out. They can't steal you identity if you use cash and you are much less of a nuisance.
crpndethMay 6, 2007
Just so I'm clear...does that mean the merchant NEEDS to keep your full CC and expiration date on their receipt? (not being in the industry) I always assumed the transaction could be revisited with the authorization number or transaction number if their was a problem...that the merchant having a copy of the CC number was not necessary.
raywirelessAug 27, 2008
although, some consumers won't agree with u, but i do. maybe because i own a restaurant too, but it would be quicker to use cash for small amount such as lunch. the lunch buffet in my restaurant is 7.25 with tax and more than half of my customers use their CC, which would be faster for the cashier if they use cash.
battybattybattJan 8, 2010
True, but of course the law - still today - does NOT cover manual imprint machines.
battybattybattJan 8, 2010
The merchant would only need the imprint full if manually needed, otherwise if the POS sys is working, transaction numbers are used to handle CBs - NOT the Exp date and NOT the full CC# - , and the law applies to POS systems as well, now.However, there is that case pending, so Zen Master says: