Only perform these if you are the cardholder or have explicit written permission (e.g., as a merchant processing a transaction):