Many retail chains I've gone to have the capability to look up your entire purchase history via a credit card, or to refund a purchase to the card that was used.
I don't know if they store the card details directly or if they store a hash, but they certainly have a way to tie your credit card to the video of your face leaving the store and (most likely) a video of your license plate as you drive away.
Sell that to a data broker (as they certainly do in the US) and someone could potentially purchase a history of what you bought anywhere and when.
I've had that experience too. I assume they use your card details to find your internal customer identifier or something and then discard the card details.
It's stored by your bank but your credit card or account id is never transferred to the retailer by the payment processors instead what happens is that McDonalds get an unique transaction ID that only your card provider knows was generated by your card.
McDonald's don't your bank does know you authorized an transaction using pin/card/app.
The payment terminal is essentially not actually talking directly to the POS except to tell it that transaction id "xyz"(which only your bank/"card issuer" know is you) was approved, everything else is encrypted between terminal and payment processor and not supposed to be visible to the retailer.
Comments
Did you pay cash?
What's that got to do with anything? Card details aren't stored.
Many retail chains I've gone to have the capability to look up your entire purchase history via a credit card, or to refund a purchase to the card that was used.
I don't know if they store the card details directly or if they store a hash, but they certainly have a way to tie your credit card to the video of your face leaving the store and (most likely) a video of your license plate as you drive away.
Sell that to a data broker (as they certainly do in the US) and someone could potentially purchase a history of what you bought anywhere and when.
I've had that experience too. I assume they use your card details to find your internal customer identifier or something and then discard the card details.
Don't they have to maintain that mapping to keep it available?
Is there no trace of you sending money from your card to McDonalds ? How do they audit for fraud ?
It's stored by your bank but your credit card or account id is never transferred to the retailer by the payment processors instead what happens is that McDonalds get an unique transaction ID that only your card provider knows was generated by your card.
So how do they know it was me who sent the money and not some McDonalds money launderer ?
McDonald's don't your bank does know you authorized an transaction using pin/card/app.
The payment terminal is essentially not actually talking directly to the POS except to tell it that transaction id "xyz"(which only your bank/"card issuer" know is you) was approved, everything else is encrypted between terminal and payment processor and not supposed to be visible to the retailer.
Yours arent, but other people's are when they agree.