@sumitkm @arvixe they might encrypt, probably don't hash but could always just hash those last 4 (which would be easily brute forced).