Apple Pay has always been promoted as one of the safest ways to pay as it uses a one-time token and virtual card number (device card number) which prevents fraud. If it is valid, we should note that the card number (last 4 digits) in the card slip should be in “virtual form” (i.e. the virtual card number instead of the actual one).
That’s valid in most of the cases while I received an increasing number of slips that are not masking my actual last 4 digit number…… I’m not the only one who shares this threat while there are only few but relatively irrelevant discussions on the internet (MacRumors and Reddit).
Hence, the issue arises: Is Apple Pay revealing our actual card number?
The answer could be yes or no.
According to Apple, the full number of our cards should not be stored in the device and (of coz) Apple’s server. Instead, a token and a “virtual card number” is being issued. So how come I received the slips and receipt with my actual card number….?
The reason behind that would be the API that apple used which is called “displayName”. It is aimed to enable the user to recognise their card from different cards while it would only be provided if the user has authorised the payment. Various payment gateway companies like Stripe do take advantage of it.
Reference :
https://support.apple.com/en-us/HT203027
https://discussions.apple.com/thread/8166878
https://www.reddit.com/r/apple/comments/bz3nui/apple_pay_not_masking_credit_card_number/
https://www.reddit.com/r/ApplePay/comments/bz4bgm/apple_pay_not_masking_credit_card_number
(kirklennon)
Winson's Blog and Database 