Requirement 3.3

Mask PAN when displayed (the first six and last four digits are the maximum number of digits to be displayed).

Notes:

  • This requirement does not apply to employees and other parties with a legitimate business need to see the full PAN.
  • This requirement does not supersede stricter requirements in place for displays of cardholder data—for example, for point-of-sale (POS) receipts.