7

When handing someone (e.g., a hotel receptionist) my credit card, what data can they extract?

Obviously the data that is printed on the card (i.e., personal name, various numbers, expiry date, credit card company etc.), but what about the magnetic stripe and the chip? Is there any additional data saved there?

|improve this question
  • 2
    There are contractual and industry rules about what info merchants are allowed to use, and how. I don't know the details, perhaps someone who does can chime in. This is an important question from a privacy and security perspective. Even if the merchant only scrapes your name, but also maybe has your zip code, they can likely pinpoint even more common names to a single individual... enabling a lot of personal data aggregation over time, across merchants, etc. – pseudon Oct 22 '14 at 21:38
  • 1
    For the stripe, see this Wiki page. Essentially, apart from some admin-data (how/where it can be used) nothing that's not printed on the card. Specifically, the PIN is not encoded (though I believe some of the information needed to verify it may be). – TripeHound Jun 1 '17 at 10:16
  • Related question on Information Security: What information about me do stores get via my credit card? – unor Apr 12 at 19:43
3

Magstripe: No. (And maybe not even that much.)

Chip: Gods only know, but I doubt it. The purpose of the chip is to provide secure authentication of the card. It has no reason to do more than that.

|improve this answer
1

I once worked on a project involving attaching magnetic stripe readers to computers to process credit card transactions. I forget the details of what was on the stripe, but it was basically just the account number, customer name, and expiration date. If you're thinking that it might have your credit limit or past 100 transactions or anything like that, no.

|improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.