As merchants get busier with holiday shopping, the Federal Trade Commission is reminding them to be sure receipts they give customers don't contain full credit or debit account numbers. To reduce the risk of fraud and identity theft, electronically printed receipts given to consumers must not include more than the last five digits of the card number and must not show the expiration date. Customers should receive a receipt that looks like this:
Copies kept by the business can include the whole account number, although many stores and restaurants are truncating those receipts too. Companies that fail to comply with the law could face FTC law enforcement action, including civil penalties of up to $2,500 per violation. It's also a Washington state law.