&gt; I wonder what the PCI implications are if it&#x27;s true that Amazon gave away his last four cc digits over the phone?<p>Absolutely none, unfortunately. Merchants are specifically allowed to store the first six and last four digits of a credit card number in any form they like.