Comment by com
1 year ago
Merchants seldom submit L3 data with transactions for stupid legacy tech reasons. The card schemes encourage them to do so with bips off scheme fees for doing so, but it’s a minority of transactions I think with even L2 data.
The merchants usually don’t (to the data brokers at least), that is correct. But backdoored firmware on the POS could send it anywhere, no?