We wanted to share some context about recent activity involving Privacy Cards and CFA MobilePay.
On May 8, our systems detected a PAN enumeration attack at CFA MobilePay. This is a known industry attack pattern where bad actors take a credit card BIN and attempt to guess active card numbers until they get a successful authorization.
Privacy Cards are designed to decline this type of attempt, so our customers remain protected. We surface this information because transparency matters to us.