Legal, Regulatory, and Privacy Issues

Practice credit card receipt safety


Laws attempt to keep credit card and debit card receipts safe from criminals looking to use account information, but consumers must also keep an eye on their card receipts.

The content on this page is accurate as of the posting date; however, some of our partner offers may have expired. Please review our list of best credit cards, or use our CardMatch™ tool to find cards matched to your needs.

Losing a credit card receipt that shows your full account number and expiration date can be nearly as dangerous as losing a credit card. Anyone with this information on a found or stolen receipt can potentially use your credit card information for a fraudulent shopping spree.

Without the physical plastic, crooks generally must resort to phone or online purchases to commit their fraud with illicitly gained credit card information. However, most reputable merchants require that the three- or four-digit security code (printed on the reverse or front of most credit cards) be included to complete a card-not-present transaction over the phone or on the Internet. Since credit card receipts don’t carry this information, the risk of fraud from their loss is somewhat diminished compared to losing the card itself.

Many merchants now only include the last four digits of a customer’s credit card number on the receipt. A prime reason for this practice is the federal Fair and Accurate Credit Transactions Act, which states that receipts for credit card and debit card transactions may not include more than the last five digits of the card number or expiration date.

However, there are exceptions. This section of the law does not apply to receipts for which the only method of recording a credit card or debit card number is by handwriting or by imprint or copy of the card. The act was signed into law in December of 2003, and the merchant has three years to comply for machines in use prior to Jan. 1, 2005. The merchant has one year to comply for machines in use after Jan. 1, 2005.

Some states have their own strict laws to protect consumers. Since January 2004, all cash registers and point-of-sale terminals in California must print safeguarded receipts that list only the last five digits of a customer’s credit card account number and no expiration date.

Regardless of the protection such laws provide, consumers should still take precautions for themselves. Credit card users must be on guard against thieves known as “dumpster diggers” who sift through garbage in search of financial information they could use to steal someone’s identity and commit fraud, as well as criminals who prowl shopping malls looking for stray sales slips and who snatch receipts out of shopping bags.

Until all credit card receipts stop listing full account numbers and expiration dates, consumers should keep a close watch on their sales receipts — keeping them in a safe place until their credit card bill arrives and making sure to shred or rip up receipts once they are ready to discard them. That same advice applies to bank and brokerage statements in addition to credit card bills, or anything that lists personal financial information. All such documents should be shredded or torn up before they get dumped in the trash.

Editorial Disclaimer

The editorial content on this page is based solely on the objective assessment of our writers and is not driven by advertising dollars. It has not been provided or commissioned by the credit card issuers. However, we may receive compensation when you click on links to products from our partners.

What’s up next?

In Legal, Regulatory, and Privacy Issues

Card use overseas: Beware conversion, exchange fees

Tips for spending overseas and keeping travel credit card fees to a minimum.

See more stories
Credit Card Rate Report
Cash Back

Questions or comments?

Contact us

Editorial corrections policies

Learn more