What is a BIN (Bank Identification Number)?
A Bank Identification Number (BIN) is the first six to eight digits of a payment card number. These digits identify the card-issuing bank, the card brand, the card type, and the country of issue, helping payment processors route transactions correctly.
What Is a Bank Identification Number?
A Bank Identification Number (BIN) is the first six to eight digits of a payment card number. These digits identify the institution that issued the card, the card network it belongs to, the type of card (credit, debit, or prepaid), and sometimes the card's tier or product level. The BIN is the part of the card number that tells the payment system where to route the transaction.
When you see a card number starting with 4, you know it is a Visa card. Starting with 5 (or certain 2-series numbers) means Mastercard. Starting with 34 or 37 means American Express. Starting with 3528-3589 means JCB. These initial digits are part of the BIN, and they carry a surprising amount of information about the card and its issuer.
How BINs Work in Payment Processing
Every card transaction begins with a BIN lookup. When a customer enters their card number -- whether at a terminal, on a website, or over the phone -- the payment system reads the BIN to determine:
- Card network Visa, Mastercard, American Express, Discover, JCB, or others
- Issuing bank The specific bank or financial institution that issued the card
- Card type Credit, debit, prepaid, or commercial
- Card level Standard, gold, platinum, business, corporate, etc.
- Issuing country Where the card was issued
This information determines how the transaction is routed. The payment processor uses the BIN to send the authorisation request to the correct card network, which forwards it to the issuing bank. The issuing bank checks whether the card is valid, whether there are sufficient funds, and whether the transaction looks legitimate -- then sends back an approval or decline.
The entire BIN lookup and routing process happens in milliseconds, completely transparent to the customer.
BIN vs IIN
You will sometimes see the term IIN (Issuer Identification Number) used instead of BIN. They refer to the same thing. The ISO standard (ISO/IEC 7812) that governs card numbering uses the term IIN, but the payment industry has traditionally used BIN, and it remains the more common term in practice.
In 2017, the standard was updated to extend the IIN from six digits to eight digits, in response to the growing number of card issuers worldwide. This means newer BIN databases use eight-digit lookups for more precise identification, while legacy systems may still work with six-digit BINs.
What BINs Tell You
A BIN lookup can reveal a great deal about a card before the transaction is even authorised:
For Fraud Detection
BIN data is a first line of defence against fraud. If a customer claims to be in the UK but their card was issued in a different country, that mismatch is a red flag. If a prepaid card is being used for a high-value transaction that would normally involve a credit card, that is worth investigating. Fraud detection systems use BIN data alongside other signals to assess transaction risk in real time.
For Interchange Optimisation
Because interchange fees vary by card type, knowing the BIN allows payment processors and merchants to understand the true cost of each transaction. A premium rewards credit card will cost more to accept than a standard debit card. Merchants processing high volumes can use BIN data to analyse their payment mix and understand their processing costs at a granular level.
For Routing Decisions
In multi-acquirer setups, BIN data can help route transactions to the processor that offers the best rates for that particular card type. This is known as smart routing or intelligent routing, and it can save significant money on processing fees.
BIN Databases and Lookup Services
BIN data is maintained in databases managed by the card networks and various third-party providers. These databases map each BIN range to its issuing bank, card type, country, and other attributes. Payment processors subscribe to these databases and update them regularly, as new BIN ranges are allocated to issuers frequently.
Free BIN lookup tools exist online, but they are often outdated or incomplete. For production payment systems, accurate and current BIN data is essential -- a wrong BIN lookup could mean routing a transaction incorrectly, misidentifying a card type, or failing to flag a suspicious transaction.
BINs and Card Number Structure
A typical card number is 16 digits long (though American Express uses 15 and some newer cards use up to 19). The structure is:
- BIN (first 6-8 digits) Identifies the issuer and card type
- Account number (middle digits) Identifies the individual cardholder account
- Check digit (last digit) A validation digit calculated using the Luhn algorithm, which catches accidental errors in the card number
The BIN portion is not sensitive in the same way as the full card number. Knowing someone's BIN tells you their bank and card type, but it does not identify their individual account. This is why PCI DSS allows the first six digits and last four digits of a card number to be displayed in the clear -- only the middle digits need to be masked.
Paytia's payment platform uses BIN data as part of its transaction processing to identify card types, route payments to the correct networks, and support fraud detection. When a caller enters their card number via the phone keypad during a telephone payment, the BIN is read to determine the card network and issuer before the authorisation request is sent.
Because Paytia's DTMF masking ensures the full card number is never exposed to agents or captured in recordings, the BIN lookup and routing happen entirely within Paytia's PCI DSS Level 1 certified environment. This means the intelligence provided by BIN data is fully available for fraud checking and routing without any card information entering the contact centre.
Frequently Asked Questions
How many digits are in a BIN?
Traditionally, a BIN was the first six digits of a card number. Since 2017, the ISO standard has been updated to use eight digits, providing more precise identification of card issuers. Many systems now support both six-digit and eight-digit BIN lookups.
Can a BIN be used to identify a cardholder?
No. The BIN identifies the issuing bank and card type, not the individual cardholder. It tells you, for example, that a card is a Barclays Visa debit card, but it does not reveal whose card it is. The cardholder's individual account is identified by the middle digits of the card number, which are separate from the BIN.
Is the BIN considered sensitive data under PCI DSS?
The BIN alone is not considered sensitive in the same way as the full card number. PCI DSS allows the first six (or eight) digits and last four digits to be displayed without masking. Only the middle digits -- the ones that identify the individual account -- must be protected. However, a full card number that includes the BIN is obviously sensitive and must be secured.
See how Paytia handles bin (bank identification number)
Book a personalised demo and we'll show you how our platform works with your setup.
Trusted by law firms, insurers, healthcare providers and regulated businesses worldwide. Learn more about Paytia