Yes, the question is a bit more complicated though. When I accept cards, I see a name, usually the one they write in the card owner input box on the web.
But consider SEPA - even if you only use IBANs, the name actually gets resolved during payment. So people who think they write John Doe in order form are actually not anonymous at all, because when the transaction is settled, I see their name.
The question then becomes - is there an API call or part of the settlement process that reveals the user name to the merchant? I don't care about card number, I consider it doxxed anyway.
If ppl checkout with Google Pay on online purchase (not contactless on a POS), do you still see card holder name, card number etc? I would have assumed if Apple/Google Pay is used, always only DPAN is transmitted
I see it because they have to write it down and I send it to credit card processor.
The question is with which cards the name is actually checked against the card holder. I know in some cases it is and the payment is refused, in many cases, any string would work.
What about chip and contactless?
Even if the name is not transmitted, is it somehow revealed during the communication with the merchant? Either at processing or settlement time.
Thread collapsed
Thread collapsed
Thread collapsed
Thread collapsed
