When we explain this problem to our delivery person he/she usually understands and agrees to only "rub" the last 4 numbers of the card. This way they would have proof that we did in fact order the pizza and the store would not have all of our card information. Our last order was a bit different. The delivery person (Pizza Hut) refused to only "rub" the last 4 digits and did not understand why this was a problem. In the end the delivery person did leave with our order, leaving a large part of it on our front door (we discovered this after he had driven off). We did call our local store and asked to speak with a manager. Failing to understand the problem the manger hung up on us. Returning the call we were meet with a never ending hold. In frustration we called the Pizza Hut corporate office and were given the same story, something about having to take the entire number for our "protection".
Out of curiosity i decided to see what the Visa Merchant agreement (PDF) has to say about their requirements of the store really are.
Here are some excerpts form their agreement:
Page 62: Truncated Account Number
Visa requires that all new and existing electronic POS terminals provide account number truncation on transaction receipts. This means that only the last four digits of an account number should be printed on the customer’s copy of the receipt.
Page 12: Magnetic-Stripe Data.
Do not store magnetic-stripe data after receiving authorization. After a transaction is authorized, the full contents of track data, which is read from the magnetic stripe, must not be retained on any systems.
Page 28: Signature and Identification
While checking the signature, you should also compare the name, account number, and signature on the card to those on the transaction receipt. Match the name and last four digits of the account number on the card to those printed on the receipt.
Page 76: Card Imprint for Key-Entered Card-Present Transactions
Avoid capturing an impression of the card using a pencil, crayon, or other writing instrument. This process does not constitute a valid imprint.
I also found some interesting documents at the Federal Trade Commission Website (www.ftc.gov).
Here is a except from The Fair and Accurate Credit Transactions Act of 2003 (PDF):
SEC. 113. TRUNCATION OF CREDIT CARD AND DEBIT CARD ACCOUNT NUMBERS.
(1) IN GENERAL.—Except as otherwise provided in this subsection, no person that accepts credit cards or debit cards for the transaction of business shall print more than the last 5 digits of the card number or the expiration date upon any receipt provided to the cardholder at the point of the sale or transaction.
(2) LIMITATION.—This subsection shall apply only to receipts that are electronically printed, and shall not apply to transactions in which the sole means of recording a credit card or debit card account number is by handwriting or by an imprint or copy of the card.
By "rubbing" the numbers of our card on the the receipt Pizza Hut may be violating the terms of their merchant agreement with Visa and Federal Law. I would encourage anyone to boycott any business who continues to use this practice. Given the fact that most delivery folks are college age or younger and are working un-supervised. We the consumer have no GUARANTEE that that business will destroy this receipt nor should be asked to put our credit ratings and money on the line just for a simple $20 order. The RISK is too HIGH.
