Credit Card Numbers With Cvv And Mm Yyyy

1 view
Skip to first unread message

Donahue Granados

unread,
Aug 5, 2024, 2:02:41 AM8/5/24
to bronimrerazz
Onmobile however (Android) the credit card numbers are formatted as 1x16 characters, making it hard to track as I attempt to copy the numbers on something like a TV screen with a console plugged in it.

I have a credit card entry form on a site I help maintain. The back end is coded to take a 2 digit expiration month and 2 digit year in the format MM/YY. Chrome seems to be set on applying credit card information in the format MM/YYYY, and so if the user has a stored CC with expiration 05/2023 it will autofill with 05/20 and due to jquery input masking will cut off the 23 portion. This results in a declined payment, which no body wants.


In the older spec, which is deprecated, the format somewhat matches what Chrome is doing, mentioning the MM/YYYY format when maxlength="7". In this case, maxlength="5" should give me what I want, but it's not consistent. For example, adding maxlength="5" works in my jsfiddle, but doesn't work on our web site. However, adding autocomplete="cc-exp" and maxlength="5" works on the web site with desktop Chrome, but not Chrome on Android it seems. Chrome on my Andrid phone still autofills with MM/YYYY.


This fiddle ( ) shows all the derivations of my original form, and all the results I have seen. It would be great if there were a 100% guaranteed way to tell the browser the format is MM/YY. Failing that, having more information on how these forms work for other people would be helpful too.


For me help to set to input field attributes autocomplete="cc-exp" maxlength="5" to pass card expiration in format MM/YY, in Chrome browser. It seems that maxlenght attribute has effect on expiration format.


In 2021, the Federal Reserve reported that about 84% of adults in the U.S. owned a credit card, and the total number of users is showing an upward trend. According to the Nilson Report, the number of payment cards used worldwide is expected to reach 28 billion by 2027.


This specific sequence and location of numbers are the standard worldwide, but there can be some minor exceptions. For example, American Express cards typically have 15 digits, while Visa, Mastercard, and Discover use a 16-digit format.


The card digits and the card number order are strategically chosen and placed. They reveal crucial information about the card, the cardholder, and the card issuer. Discover what they mean in the table below:


The BIN system was established by the American National Standards Institute (ANSI) and the International Organization for Standardization (ISO). Its primary purpose is to increase the efficiency and security of payments.


The Bank Identification Number helps merchants evaluate transactions and detect fraudulent or stolen cards. When initiating a transaction, you need to enter your card number, expiration date, and CVV or CVC. The issuer then receives a request to verify the account, the availability of the funds, and the compliance with national law. The BIN gives merchants all they need to validate the information and process the transaction.


According to Security.org, 65% of U.S. citizens were victims of credit card fraud at least once in their lifetime. In 2022, 44% of credit card users had to deal with two or more unauthorized charges, a significantly higher number than the previous year (35%).


Privacy Virtual Cards enable you to shop online and enhance the security of your transactions, fortifying your defense against the ever-present risk of identity theft.


While some banks offer virtual cards to registered account holders, Privacy gives you more freedom as you can request and generate Privacy Cards with your existing account, irrespective of the associated bank. After creating a card, you can lock it to a specific merchant or have it automatically close after a single purchase, minimizing the damage in case of a data breach.


You can also pause and unpause Privacy cards at any time. If you notice any suspicious transactions on your virtual card, you can close it instantly without worrying that it will affect your actual card or bank account. This feature is also convenient for preventing unwanted subscription charges. Once you pause or close the virtual card, Privacy will block all further charge attempts. Note that you still have to reach out to the merchant and cancel the subscription directly.


With the base tier, you can generate up to 12 Privacy cards a month, which are free to use for domestic transactions. You can set spending limits, pause, and close the cards. The plan also includes access to the mobile app and browser extension.


However, the thread What's the impact of disclosing the front-face of a credit or debit card? made me realize the CVV (security code) was not required on some websites (such as Amazon.com) when buying stuff.


The only problem I can see is that a shop assistant could refuse me to pay with a "damaged" card. Nevertheless, I only use my credit card to get some cash, I suppose ATMs don't care about a "damaged" card (I guess they only get data from the chip).


I forgot to mention in my question that my bank is Irish and my personal address for my card is my parents' address in France (as I travelled a lot). If somebody steals my card and buys an expensive camera on Amazon and get delivered in the city where I live in Asia, how could the bank believe it was not me?


That's why I thought it would help to remove some digits. I realize I was too naive and Eric's message made me understand that some thieves would be able to get the card number from its chip whatever I would do to the card.


A credit card contains the card number (also known as the PAN), it multiple ways. Even if you remove the raised digits, some thieves may had a card reader and can get this information off of the card swipe. If there are shops where they are using a rub method, they will need all of the digits anyway. You could just tell them the missing digits and they can write them down if its all offline. If they have a digital terminal, they will be typing in all of the digits one by one anyway and technically don't even need the card.


Instead of mitigating the risk of your credit card being stolen, it might be more practical to look into the transference or risk. After being robbed, can you get to a phone and cancel your cards? Your card should have fraud protection to reverse the transactions. I cannot comment on whether the requirements are different in asia, but you should be able to have fraudulent charges reversed and a new card sent. You could also look into credit monitoring and other fraud protection services.


I have also seen technology which replaces raised numbers with a digital display which you have to activate with a 4 digit pin on the card itself. I only recall two banks implementing such a technology. This doesn't appear to be exactly the same thing, but maybe in the future it will become more popular to have cards that dynamically re-write the mag strip like this or like this. Maybe you can get a new card from a bank with bleeding edge tech.


Removing the first few digits (6 or less) may not help security at all. Visa cards all begin with a '4'. MasterCard card numbers begin with '51', '52', '53', '54', '55'. Discover and Amex have similar small numbers of prefixes. The next 4 or 5 digits are the "IIN" or "BIN" - these identify the bank or issuer of the card. Lists of IIN's are easily found. It may be possible to figure out the IIN based on the bank name on the card itself. You can't remove the final digit of a card number: that's a check-digit, calculated from all the previoius digits.


As long as you don't harm the magnetic strip or the chip, there should be no trouble from a machine's point of view. However I wouldn't bother going through all that trouble for at least one good reason:


Having said that, I'm pretty sure that my card would continue to meet most of my needs if I cut out a section containing the contact pads for the smart-card (EMV) chip and glued it into a same-position cutout in a blank card. I've not used the embossed data for decades and not used the magnetic stripe for a similar period. Many retailers now have self-service checkouts and those that don't invariably don't have the checkout operator look at or handle the card.


Hello: On my form I have a field for credit card number. Most CC numbers are 16 digits. When we receive the email after submit the card number is always truncated eg.

4.55121001913161e+015. If go into to the table, I can retreive the full number, but the person who gets the emails does not have access to the table. Also expiry date has to be put in as a text field because of the slash (/) between month and year.


The field for the number must be 16 digits (I don't think there are any cards with more numbers than that).

The expiry date should be mm/yy or mm/yyyy format with the "/" in between.

Nowdays there is a 3 or 4 digit number on the back of most cards that is also required. I believe it is call a cvv code. It should have a separate box.


If i may, I would like to suggest that the field would automatically change a few things when American Express is selected. American Express has 15 digits, and the CVV is 4 digits.

Any idea when will you come up with this addition? I can't imagine that it's too much work.

Thanks.


Yes gulli1, I made an error on my above post. I meant to say the field for the number must work upto 16 digits. I know Amex are less and have a funny feeling that Discover might be less as well. Also, the cvv code may be on the FRONT or BACK of the credit card, depending on the card. Not just on the back like I originally said.


Sure, 4-field options aid readability - so if the user entered their number wrong it's easier for them to re-read their entry to see what area they did wrong. But this can still be mitigated in a single field. Just as you showed above, you can render the user input with spaces in the single field.


Another consideration is mobile users. While it may well be simple on a desktop, a mobile has a keyboard it needs to open and close on entry of the field. Different devices and OS's behave differently, but it's quite likely that on the jump from field 1 to field 2 the keyboard will autoclose and autoopen, causing a jarring flash on screen, with the user possibly trying to click the 5th digit just as the keyboard closes, thereby moving the cursor into another area of the screen altogether, or just missing that digit from entry altogether.

3a8082e126
Reply all
Reply to author
Forward
0 new messages