I installed an NFC reader on my android and scanned each of my bank cards to see what they would reveal through their contactless feature (NFC).
Unsurprisingly they reveal the card number and the expiry date, these are required for the transaction and they did not reveal the cv2 which is comforting.
I was surprised to find though my Mastercard credit card revealed a transaction history with the charged amount and the date and time of the transaction, I tried this out with another card and found the same.
Does this present a security risk to the owner of the card if a malicious actor read their card with an app like this or if the card is lost. It does not reveal who the payment was made to, but this could be enough information to socially engineer the card holder. What is the benefit of storing this transaction history on the card itself? Only the Mastercard credit card seemed to do this, so it does not appear to be an industry standard practice.