Originally Posted by basschick

if these were virtual visa transactions, meaning that the money was spent online at a merchant, the user would not have to have all the cardholder's info - just the name, number, expir. date and numbers on the back of the card. any merchant who has run a card for a transaction may have all of that information and so might their employees.