What a payment receipt has to show, and what it may not print

The receipt rule is about terminals, not about sellers

The first thing to establish is who the receipt rule binds. The obligation is on a financial institution, and it attaches to a specific moment.

A financial institution has to make a receipt available to a consumer at the time the consumer initiates an electronic fund transfer at an electronic terminal. That is the trigger, and the exception is a stated small-value threshold below which no receipt is required.

The information the receipt has to set out, as applicable, is a short list. The amount of the transfer. The date the consumer initiates it. The type of transfer and the type of account it moves to or from. A number or code identifying the account or the access device. The terminal location. And the name of any third party to or from whom funds are transferred.

A transaction fee may be folded into the amount shown, but only if the amount of the fee is disclosed on the receipt and displayed on or at the terminal.

None of that is a description of what a seller has to hand over after an online purchase. It is a description of what a bank has to produce at a terminal, and the two are frequently confused.

How little of the account number has to appear

The identification item on a terminal receipt is deliberately thin. A number or code that identifies the consumer's account or accounts, or the access device used, satisfies it.

The rule then says the quiet part explicitly: the number or code need not exceed four digits or letters to comply.

That is a floor for compliance rather than a ceiling on disclosure, and it is the reason a receipt showing four characters of an account is a complete receipt under this rule rather than a truncated one.

The terminal location item works the same way. It can be the location, or an identification such as a code or terminal number, and where the location is disclosed it generally has to include the city and state or foreign country plus a street address, a generally accepted name for the location, or the name of the terminal owner or operator if that is not the account-holding institution.

A receipt built to this standard identifies the transaction well enough to be matched to a statement. It does not identify what was bought.

The card number limit is a separate statute with a separate target

A different rule, in the credit reporting statute rather than the electronic transfer rules, restricts what a receipt may print.

No person that accepts credit cards or debit cards for the transaction of business may print more than the last five digits of the card number, or the expiration date, upon any receipt provided to the cardholder at the point of the sale or transaction.

The target here is not a bank. It is any person that accepts cards for the transaction of business, which includes an online seller.

The limitation is narrow in one important way. The subsection applies only to receipts that are electronically printed. It does not apply to transactions in which the sole means of recording the card account number is by handwriting, or by an imprint or copy of the card.

So the rule reaches the machine-produced receipt and not the handwritten record. That distinction is the whole of its scope, and it is worth reading before assuming any receipt is covered.

The statement does more work than the receipt

For an account that electronic fund transfers can reach, the institution has to send a periodic statement for each monthly cycle in which such a transfer occurred, and at least quarterly if none did.

The statement carries more than the receipt. For each transfer in the cycle it has to show the amount, the date it was credited or debited, the type of transfer and account, the terminal location for consumer-initiated terminal transfers other than cash or paper deposits, and the name of any third party involved.

It also has to show the account number, the amount of any fees assessed during the period for electronic fund transfers, for the right to make transfers or for account maintenance, and the balance at the beginning and at the close of the period.

It has to carry an address and telephone number for inquiries or notice of errors, preceded by wording such as "Direct inquiries to".

Where the institution uses a telephone-notice option for confirming that preauthorized transfers into the account have arrived, the statement also has to carry a telephone number the consumer may call to find out whether they have.

The obligation is relaxed in named cases. For an account reachable only by preauthorized transfers into it, a passbook account can be updated on presentation instead, and other accounts get a quarterly statement. Where a consumer moves money between two of their own accounts at the same institution, documenting the transfer on one of the two statements is enough.

That address item matters more than it looks, because the sixty-day window for giving notice of an error runs from the statement on which the alleged error is first reflected. The statement is the document the dispute clock is measured against.

What none of this gives a buyer

Neither rule requires a description of goods. A terminal receipt shows an amount, a date, a type, a partial account identifier, a location and a third-party name. A card receipt is limited in what it may print, not directed in what it must.

Nothing in either rule obliges a seller to state a strength, a quantity, a compound name, a period of supply or a breakdown between medication, membership, shipping and supplies.

That gap matters in a cash-pay category, because the documents a buyer ends up holding may not describe what was purchased at all. Where a purchase later has to be described to someone else, the substantiating document is generally an itemised invoice from the seller rather than a payment receipt, and the tax rules on that are the subject of a separate article here.

The practical consequence is that a payment receipt and a purchase record are different documents. One proves that an amount moved. The other says what it was for.

A buyer who will need the second one is better off establishing before paying whether the seller issues it, because no payment rule compels the seller to produce one afterward.

Sources

Each document below is named as it names itself, with the date printed on that document rather than the day it was read.

1. Title 12 Code of Federal Regulations Section 1005.9, Receipts at electronic terminals; periodic statements, Regulation E, read paragraph (a) through paragraph (e), including the six receipt items at (a)(1) through (a)(6), the four-character identification rule at (a)(4), the periodic statement contents at (b), and the small-value receipt exception at (e) — Electronic Code of Federal Regulations, Office of the Federal Register, December 2011
2. United States Code Title 15, Section 1681c, Requirements relating to information contained in consumer reports — read at subsection (g), Truncation of credit card and debit card numbers, paragraphs (1) through (3), 2024 Main Edition — Office of the Law Revision Counsel, U.S. House of Representatives, January 2025