Payment Card Industry (PCI) compliance

PCI DSS requirement 3.3 states “Mask PAN when displayed (the first six and last four digits are the maximum number of digits to be displayed).”

PCI Frequently Ask Questions