The credit card swipers send the entire transaction in for both approval and reporting. I'd imagine that the account number, merchant number, and transaction amount are all there, since that's all needed. Whether or not they encrypt the data I don't know.