PAN Masking Rules

By default, EFTLink is configured to use the CardRange.xml to control the card mask to be applied when sending a PAN. If you are intending not use the cardrange.xml, then EFTLink will fall back to its default masking rule which is to show only the last four digits of the PAN.

This can be altered either by using a cardrange.xml file or by JVM system properties EFTLink.UnmaskedPanStartLength and EFTLink.UnmaskedPanEndLength.

The accepted start length range is limited to 0 to 8 whereas end length range is limited to 0 to 4. The defaults applied are to mask the whole PAN apart from the last four digits.

The supplied CardRange.xml has been altered to only send the last four digits of PAN by default. Please refer to Partner Enablement Oracle Retail EFTLink CardRange.xml Guide on how to make changes.