Yes - and the last 4 digits should be available on EVERY transaction, not just recurring. Case in point - we sold tickets at a recent event. A volunteer accidentally recorded a transaction under the wrong name. The only data point I had to identify the card used was the expiration date.