Seems to be some detail, deliberately, omitted. Card numbers in full are not, as a rule, printed on receipts. How was this Scam really carried out? And a universal PIN number? Really? That bigger loophole?
Or is it the usual shite reporting by The Mail?