undefined | Better HN

0 pointshbosch4y ago0 comments

I believe it is the case, that when you see your stored payment method is is obfuscated such that it only reveals the last 4-5 digits. Same with bank details as far as I know.

However, showing the card issuer/bank + the final 4 or 5 digits of an account or card number is still extremely distressing. There are some services and vectors out there that can be engineered with just that information for sure.

Combine that with possibly exposed address, telephone number, and you are in very dangerous territory.

0 comments

shkkmo4y ago

It might be accurate if you are internally discussing PCI compliance.

However, to the layperson, "bank details" definitely includes name of bank and last 4 digits of account number. It does come across as deceptive to use that terminology to respond to customer complaints.

j / k navigate · click thread line to collapse

0 pointshbosch4y ago0 comments

I believe it is the case, that when you see your stored payment method is is obfuscated such that it only reveals the last 4-5 digits. Same with bank details as far as I know.

Combine that with possibly exposed address, telephone number, and you are in very dangerous territory.

0 comments

shkkmo4y ago

It might be accurate if you are internally discussing PCI compliance.

j / k navigate · click thread line to collapse