Yeah it's populated on card number change via JS

https://github.com/spree/spree/blob/2-1-stable/backend/app/assets/javascripts/admin/checkouts/edit.js#L8-L16