The U.S. Federal Trade Commission and security guidelines from several banks all recommend that cardholders should not disclose the last four digits of their card number to any unsolicited call or email.