Card numbers on PayPal's system

[blueuk]

A question to the security and tech experts out there:

Do you think PayPal store our card numbers in a manner that when verification is requested, they can check the card number matches in full?

Or do you think staff can only see the last 4 digits and work from that?

[blueuk]

I was talking about a visual check, I'm sure they could enter the card number on a computer to check it matches, but I can't see PP staff having access to millions of card numbers.

[Callidus]

PayPal they will only ever ask for you to verify the last 4 numbers on the card.

The system will store the full card number, if this was to be re used on another account then yes, it would be flagged and a link made.

[blueuk]

What about when limited and they ask for cc statement.

Am I incorrect thinking PayPal staff would only have access to the last 4 digits of the card number, and check that against any credit card statements uploaded?

Years ago when I used entropay and they requested cc statement and got a sainsburys credit card statement, and accepted it, is the basis behind my conclusions.

[Callidus]

That isn't ideal as they can clearly identify where the CC has originated from and which issuer. It has been known for screenshots to work for Entropay which is recommended rather than getting creative.

If they did check the BIN number they could see exactly where the CC was from and if this didn't match the CC statement / provider, say goodbye to the account.