Card photos outlive the reason you took them.

Start with the copy you actually have

Not every card-related image carries the same risk.

A full front-and-back card photo, a screenshot containing the card number and security code, and a receipt showing only the last four digits are different records. Review what is visible, where the image has been stored or shared, and whether anyone else may have received access.

Do not send the image to another service merely to identify it. If you need a transaction record, preserve a safer statement or receipt that does not expose unnecessary card details before removing the risky copy.

Search card-related text with Photos

Apple says Photos can search text recognized inside an image. Open Photos, tap Search, and try labels or surrounding words you remember rather than typing the full card number:

• card, credit, debit, billing, payment, CVV, expiration
• Visa, Mastercard, American Express, Discover
• the card issuer, merchant, checkout service, or support conversation
• the Screenshots collection plus one of those terms

Spotlight can also search text in photos with Live Text. Search results are only a starting point: OCR can miss small, angled, blurred, or low-contrast text, and a brand name can appear in harmless images.

How SecretScan checks likely card numbers

SecretScan performs OCR on the device and looks for 13–19 digit candidates that pass a standard checksum. Grouped digits and nearby payment words such as “card,” “billing,” or “CVV” raise confidence; common order, tracking, and confirmation contexts lower it. Accepted results show only the last four digits in the evidence text.

This is pattern matching, not proof. A real card can be missed when OCR is poor, while another checksum-valid number can still be flagged. Confirm each result yourself before deleting anything.

Choose cleanup or containment based on exposure.

1. If the image remained under your control: preserve any record you genuinely need in a safer form, delete the unnecessary image, and review Recently Deleted.
2. If the image was shared, uploaded, or accessed by someone else: use the issuer's official app or contact information to lock or report the card promptly, then follow the issuer's replacement instructions.
3. If you see an unfamiliar charge or withdrawal: report it to the bank or credit union immediately and keep monitoring the account. Do not rely on deleting the image as remediation.

The FTC notes that protections can depend on the card type and how quickly a loss or unauthorized activity is reported. The CFPB likewise advises prompt reporting and checking the applicable card agreement.

Remember Recently Deleted and iCloud Photos.

Apple says deleted photos normally remain in Recently Deleted for 30 days unless you permanently remove them sooner. With iCloud Photos enabled, deletion applies across devices signed in to the same Apple Account. Make sure you intend to remove the image before permanently deleting it.

If you are unsure whether the image escaped

Use the local screenshot exposure check to separate urgent credential containment from routine cleanup. It asks only Yes, No, or Unsure questions; you do not enter a card number or upload an image.