> Credit cards should never be linked across accounts thanks to PCI-DSS complince

Afaik, PCI-DSS doesn't prevent you to store cryptographic hashes of card. Therefore cards still could be linked with hashes.