Re:How Uber Used Secret “Greyball” Tool to Deceive Authoriti...
by tzs on Friday March 03, 2017 @03:46PM
(#13786338)
> They can't store the numbers themselves except the last four digits IIRC
Companies can store the whole number. That's how on-file payments and automatic subscription renewal payments work.
What you are probably recalling is a PCI rule that requires keeping the credit card number protected, such as storing it encrypted and only letting things that are sending transactions to the credit card network have access to the plaintext. That rule has an exception for the last 4 digits and the first 6 digits.
For example, when your customer support people look up the history of a customer they are helping, if your account info viewing tool shows a list of prior transaction details, it could not show the credit card number used for each transaction, but it could show the first 6 and the last 4 digits.
Companies can store the whole number. That's how on-file payments and automatic subscription renewal payments work.
What you are probably recalling is a PCI rule that requires keeping the credit card number protected, such as storing it encrypted and only letting things that are sending transactions to the credit card network have access to the plaintext. That rule has an exception for the last 4 digits and the first 6 digits.
For example, when your customer support people look up the history of a customer they are helping, if your account info viewing tool shows a list of prior transaction details, it could not show the credit card number used for each transaction, but it could show the first 6 and the last 4 digits.