The short answer
The BIN (Bank Identification Number), formally renamed IIN (Issuer Identification Number) by the card brands in 2022, is the leading set of digits on a payment card number. Historically 6 digits; now expanding to 8. Those digits identify the issuing bank and the specific card product — consumer debit, corporate credit, Visa Signature rewards, prepaid GPR, EBT benefit card, etc. BIN data is the single most useful signal a merchant has at checkout for fraud, cost, and compliance decisions.
What a BIN lookup tells you
- Card brand: Visa (4*), Mastercard (51-55, 2221-2720), Amex (34, 37), Discover (6011, 644-649, 65).
- Issuing bank: Chase, Capital One, Wells Fargo, Deutsche Bank, HSBC, etc.
- Country of issuance: Determines cross-border interchange category and whether the transaction is subject to additional FX fees.
- Card type: Credit vs. debit vs. prepaid.
- Card product: Basic, Gold, Platinum, Signature, Infinite, Business, Corporate, World Elite — each with different interchange.
- Regulated status: Is this bank over $10B in assets (Durbin-regulated debit) or exempt?
How operators use BIN lookup
- Surcharge compliance. Debit cards can't be surcharged. BIN lookup is how your gateway knows to suppress the surcharge on debit transactions in a surcharge program.
- Debit routing. Regulated debit can route over Visa/MC or an unaffiliated network (Pulse, Star, NYCE). BIN tells you which options are available.
- Fraud scoring. Prepaid cards and certain foreign BINs carry elevated fraud risk — score accordingly.
- Cost optimization. Commercial BINs may qualify for Level 2/3 interchange savings if you submit the enhanced data.
- Payment-method display. Show the right card logo on cart UIs based on BIN.
6-digit to 8-digit BIN migration
In April 2022, the card brands officially moved from 6-digit BINs to 8-digit to avoid running out of allocations. Most merchant-side systems still operate on 6-digit data, but any modern processor/gateway is returning full 8-digit BIN data. Precision matters: an 8-digit BIN distinguishes between two card products from the same bank that have wildly different interchange rates.
What operators need to know
- BIN databases go stale. Banks launch new products, acquire each other, re-issue ranges. Use a live BIN lookup service, not a 2018 CSV dump.
- Free BIN lookups lie. Free public BIN APIs have 60-80% accuracy. For surcharge compliance and debit routing, that's not good enough — a wrong debit/credit classification is a surcharge violation.
- Multi-brand operators benefit from BIN intelligence. If one brand sees 40% prepaid BINs and another sees 5%, that tells you who's being targeted for card testing and where to tune velocity.
- PCI scope: The BIN itself is not PCI-sensitive but storing BIN alongside the last 4 is fine. Storing the middle 6 digits is where PCI concerns kick in.