Regarding the regex, same as `#validate_card_token`.

```ruby
/\A\d{4}\Z/
```