NAB EFTPOS machines a security risk.

[markis10]

Was just doing some filing and noticed that the NAB EFT receipts show full card details including expiry date! Surely thats a bit of a risk, most of the other bank machines just show certain digits! Ironically I am pretty sure that contravenes PCI compliance, which banks insist for their merchants!

 

[LiamR]

NAB just responded on Twitter, markis10

"Thanks for letting us know, this is unusual. If the customer or merchant can contact us directly we'll investigate"

https://twitter.com/#!/NAB/status/193233047674560512

 

[kyle]

Is it an old terminal? Some of the old terminals do show the full credit card number and expiry.

 

[Mal]

I hazard a guess it's an older machine and your transaction was done "offline". Have seen this before.

And yes, AFAIK it is in breach of PCI standards and the machine needs a firmware/physical upgrade.

 

[markis10]

It's Europcar in BNE city, I wonder if it's a one off?