Credit Card Receipts - New Visa Regulations
 

For those of you that have your own merchant accounts.

If you didn?t know you do now


Credit Card Number Truncation:

New state laws and credit card regulations are now being passed that impose restrictions on customer credit card data displayed on customer receipts. The most restrictive law states that credit card numbers on consumer receipts must be truncated to the last four digits, with the expiration date suppressed entirely.

Not sure about the US, but Canadian merchants have till 2010 IIRC to comply.

About time. When I was moving house recently I found quite a few receipts that had my full card number and expiry date printed on them. I doubt they could be used for an online transaction, but pay-by-phone doesn't require you to 'enter' your name...

I ripped the receipts into strips and put the pieces into separate garbage bags, but if someone was really determined it wouldn't be too hard to piece together the info from a few different receipt strips.

It's very good, finally something of useful :thumbsup

This is going nationwide by the end of 2004 for all us merchants.
Im told all us merchants must comply with this by the end of 04.

Burn them next time.

Thats why you need a good paper shredder sitting over your trash can in the office.

This is defiantly a step in the right direction. Pretty soon the dumpster divers will be out of business.

Exactly... paper shredders are great. I shred then burn anything important, it's the highlight of my day.

wow some of you guys are really paranoid

nothing new there

Visa is also extending new requirements on non-printed credit card data that's captured by a POS terminal. As of last week I got notice that I could connect remotely to a customers machine to correct data but could NOT pull the data back to my computer to work on it. In talking to my contact, VISA is worried about viruses and worms and are taking the stand that the fewer physical machines the data appears on, the less likely it can be stolen.

It's my understanding (although I can't confirm it) that soon, all credit card data stored on any computer will have to be encrypted.