Go Back  FlyerTalk Forums > Miles&Points > Airlines and Mileage Programs > United Airlines | MileagePlus
Reload this Page >

WARNING: eTicket Receipts Print ENTIRE Credit Card Number

WARNING: eTicket Receipts Print ENTIRE Credit Card Number

Reply

Old Mar 7, 12, 10:18 pm
  #1  
Original Poster
 
Join Date: Mar 2005
Location: BOS and any place close to a lav
Programs: UA 1K (1.5MM)
Posts: 5,403
Exclamation WARNING: eTicket Receipts Print ENTIRE Credit Card Number

On Tuesday (3/7), I checked in and printed an eTicket Receipt at the PMCO Kiosk at PHX.

The receipt prints out my ENTIRE credit card number (the one used to book the ticket). Another change that I like.

Just a word of warning for those that chose to print one.

Also, I tried both the PMUA and PMCO check-in kiosks. The PMCO ones were significantly quicker. The PMUA ones were very slow. Perhaps the PMUA kiosks (known affectionately as the chickens) have less processing power than the PMCO ones.
warreng24 is offline  
Reply With Quote
Old Mar 7, 12, 10:27 pm
  #2  
 
Join Date: Sep 2010
Programs: UA/CO 1K, AA Gold, SPG PP, Hertz PC
Posts: 207
Originally Posted by warreng24 View Post
The receipt prints out my ENTIRE credit card number (the one used to book the ticket).
Oh good, UA is going to take the extra money they make from selling my upgrade and spend it on fines for PCI violations.
Strom is offline  
Reply With Quote
Old Mar 7, 12, 10:28 pm
  #3  
 
Join Date: May 2003
Location: Redwood City, CA USA (SFO/SJC)
Programs: Last 1K flight 1/21/11; fun while it lasted, 1P in 2011, Plat for 2012,13,14,15 & 2016. Gold in 17 &
Posts: 8,476
Originally Posted by warreng24 View Post
On Tuesday (3/7), I checked in and printed an eTicket Receipt at the PMCO Kiosk at PHX.

The receipt prints out my ENTIRE credit card number (the one used to book the ticket). Another change that I like.

Just a word of warning for those that chose to print one.

Also, I tried both the PMUA and PMCO check-in kiosks. The PMCO ones were significantly quicker. The PMUA ones were very slow. Perhaps the PMUA kiosks (known affectionately as the chickens) have less processing power than the PMCO ones.
That's a fuzzy gray area (printing the entire number) and certainly a practice that PCI standards discourage. It's a serious security issue since people routinely throw away receipts, and you don't want to throw away a receipt that has your entire card number on it. For a crook to take advantage of it, all that's needed is to try approximately 24 possible expiration dates. You still retain the mild security of not having the CVA number on the back compromised, but many transactions don't require that.
Mike Jacoubowsky is offline  
Reply With Quote
Old Mar 7, 12, 10:39 pm
  #4  
FlyerTalk Evangelist
 
Join Date: Nov 2009
Location: Lawrence, KS | MCI
Programs: UA*G, Hyatt Globalist, Marriott Plat., NEXUS, Amex, TSA Disparager Unobtanium
Posts: 20,118
So they only show part of our MP #'s in the emails, but they'll print a receipt with the full CC #...
FriendlySkies is offline  
Reply With Quote
Old Mar 7, 12, 10:57 pm
  #5  
In Memoriam
 
Join Date: Feb 2000
Location: Easton, CT, USA
Programs: ua prem exec, Former hilton diamond
Posts: 31,801
Have you told them (United) it's doing that? I can't imagine they did that intentionally.
cordelli is offline  
Reply With Quote
Old Mar 7, 12, 11:01 pm
  #6  
 
Join Date: Jan 2006
Location: Manchester, NH
Programs: UA 1k 1MM, National Exec Elite, Hilton Diamond, Marriott Gold, IHG Gold, AMTRAK
Posts: 513
Originally Posted by warreng24 View Post
On Tuesday (3/7), I checked in and printed an eTicket Receipt at the PMCO Kiosk at PHX.

The receipt prints out my ENTIRE credit card number (the one used to book the ticket). Another change that I like.

Just a word of warning for those that chose to print one.

Also, I tried both the PMUA and PMCO check-in kiosks. The PMCO ones were significantly quicker. The PMUA ones were very slow. Perhaps the PMUA kiosks (known affectionately as the chickens) have less processing power than the PMCO ones.
Gotta be a bug, I printed one Sunday night from kiosk and it shows XXXXs then last four digits which is how it should be.
mht_flyer is offline  
Reply With Quote
Old Mar 8, 12, 12:19 am
  #7  
 
Join Date: Jan 2009
Location: LHR (sometimes CLE, SFO, BOS, LAX, SEA)
Programs: UA 1K
Posts: 5,744
That sounds like a bug.

I did think it interesting that when I used the kiosks at SEA to print out a boarding pass, it printed my MileagePlus number as "AB******" (first two characters correct, last six characters asterisks). A boarding pass printed manually by an agent on their side of the ticketing counter contained my entire MileagePlus number.
mherdeg is offline  
Reply With Quote
Old Mar 8, 12, 1:09 am
  #8  
Moderator: United Airlines; FlyerTalk Evangelist
2019 FlyerTalk Awards
 
Join Date: Jun 2007
Location: SFO
Programs: UA Gold 1.8MM, Hyatt Discoverist, Marriott Gold, Hilton Silver, IHG Gold
Posts: 44,516
Originally Posted by warreng24 View Post
On Tuesday (3/7), I checked in and printed an eTicket Receipt at the PMCO Kiosk at PHX.

The receipt prints out my ENTIRE credit card number (the one used to book the ticket). ......
Printed BPs and then eTicket Reciept at SBA's kisok/chicken (since SBA was only a PMUA station, likely a PMUA unit) and it only shows the last 4 numbers of the credit card
-- so this issue does not appear to be universal.
WineCountryUA is offline  
Reply With Quote

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are Off


Thread Tools
Search this Thread
 
  • Ask a Question
    Get answers from community experts
Question Title:
Description:
Your question will be posted in: