The familiar string of 16 digits embossed across the front of your credit card is heading for retirement. Mastercard says it will phase out the printed card number on physical cards by 2030, part of a wider push to shut down the kind of online fraud that drained roughly 84 million dollars from New Zealanders in a single year.
Megan Simons, Mastercard’s country manager for New Zealand, told RNZ that scammers managed to lift around 84 million dollars from local cardholders in the year to November, mostly by getting hold of card numbers and using them to shop online. “It’s really significant, it’s really worrying,” she said, describing the figure as the kind of number the payments industry has a duty to bring down.
The logic behind a numberless card is simple enough. If the 16 digits, the expiry date and the security code are not printed anywhere on the plastic, then a card that is lost, stolen or photographed cannot be turned into an online shopping spree. “If you lose your physical card, somebody can’t pick it up and use that number on the front to go shopping online,” Simons said. Cardholders would still see their full number, but only inside their banking app, unlocked with a fingerprint or a face scan rather than printed in the open.
It is not a far-fetched idea. A handful of New Zealand cards already work this way. The Sharesies debit card carries no number on its face, and the Square One card aimed at children and teenagers does the same. What Mastercard is signalling is that the blank card will become the default rather than the exception over the next few years.
Stripping the number off the plastic is only one piece of the plan. Mastercard is also pushing one-time virtual card numbers, which let a shopper generate a single throwaway number for a particular purchase. Once that transaction is done the number is dead, so a data breach at a retailer months later hands the thieves nothing of value. “Even if the details get compromised later down the track, the number becomes useless,” Simons said.
Alongside that sit cards that can be switched on for a set period or locked to a single type of merchant, so a number set up to pay one subscription cannot suddenly be used to buy electronics on the other side of the world. Mastercard is also leaning harder on its Click to Pay service, which removes the need to type card details into a checkout box at all and instead approves the payment with a fingerprint or a face scan.
The company is even floating a future in which artificial intelligence agents handle some transactions on a business owner’s behalf, watching inventory, smoothing out cashflow and chasing loyalty perks. That part is further off and raises its own set of questions, but it shows how far the card networks want to move away from the model of a static number printed on a piece of plastic.
The shift matters because the way New Zealanders are robbed has changed. The old picture of a pickpocket lifting a wallet has given way to card numbers being skimmed, phished or bought in bulk on the dark web, then used remotely for what the industry calls card-not-present fraud. In those cases there is no card to swipe and no chip to read, just a number, an expiry date and a three-digit code. Remove the number from circulation and the most common form of card crime gets a great deal harder to pull off.
Retailers have a stake in this too. When a card-not-present transaction turns out to be fraudulent, it is very often the merchant who wears the cost through a chargeback, not the bank and not the cardholder. Small online traders have complained for years that they are left carrying losses on sales they had no way of knowing were dodgy. Anything that cuts the supply of usable stolen numbers takes pressure off that part of the economy as well.
None of this removes the need for old-fashioned caution. One-time numbers and numberless cards close off the theft of card details, but they do nothing to stop someone who is talked into approving a payment themselves. Authorised push payment scams, where a victim is convinced to send money or wave a transaction through, are rising fast and sit outside the protections built into the card itself. The banks and Mastercard can harden the card, but a calm voice on the phone claiming to be from the fraud team remains the weak point.
For now the changes will roll out gradually rather than landing all at once. Existing cards will keep working, and most people will first notice the shift when a replacement card turns up looking strangely blank, or when their banking app starts offering to spin up a single-use number for an online order. By 2030 Mastercard expects the printed number to be the unusual thing, a relic of an era when the secret to spending your money was sitting in plain sight on the front of your wallet.
The broader trend has been picked up internationally, with outlets including the Otago Daily Times noting the same move toward cards that give away nothing if they fall into the wrong hands.
What do you make of a credit card with no number on it? Would you trust your banking app to hold the details, or do you still want the digits printed where you can see them? Share your thoughts in the comments below.
This article was written by AI, briefed to report the facts, hopefully without some of the bias people bring to the job 🙂
Leave a Reply