Merchants can store the account holder's name and the card's last 4 digits, which is pretty much all that is needed to correlate transactions.