Masking PAN when displayed is implemented; which is true?

Masking PAN when displayed is implemented; which is true?

• A. Masking requires showing the full PAN on internal screens.
• B. The display can show the first six and last four digits, and POS receipts may have stricter display requirements.
• C. Masking is not required for any on-screen display.
• D. Masking applies only to online transactions.

Answer: (B)

Masking PAN is about protecting cardholder data by not displaying the full number. On screens used during transactions, you should avoid showing the entire PAN. A practical standard is to display only the first six and the last four digits, which helps identify the card without exposing the full number. Receipts at the point of sale often have even stricter rules, typically showing only the last four digits or masking more of the number. So the correct statement reflects that the display can show the first six and last four digits, while POS receipts may require tighter masking.

Masking PAN is about protecting cardholder data by not displaying the full number. On screens used during transactions, you should avoid showing the entire PAN. A practical standard is to display only the first six and the last four digits, which helps identify the card without exposing the full number. Receipts at the point of sale often have even stricter rules, typically showing only the last four digits or masking more of the number. So the correct statement reflects that the display can show the first six and last four digits, while POS receipts may require tighter masking.