Snopes.com says false.

Plus...with PCI requirements I doubt hotels would leave credit card numbers unencrypted.

People think I'm paranoid about identity theft and I don't buy this story.
...plus my address on my hotel programs is not my address so anything with a zip code requirement would not match.