Chargeback Reviews

What a BIN Number Is and What It Tells You

A BIN is a bank identification number. It points to the bank that issued the card. Here is what it does, and what it never shows.

You saw the letters BIN on a statement, a fraud alert, or a dispute page. The term sounds technical. The idea behind it is simple. This page explains what a BIN number is, where it sits on a card, and what it can and cannot tell you. It is not a lookup tool. No card ranges are listed here.

What is a BIN number?

BIN stands for bank identification number.

The PCI Security Standards Council keeps a glossary of payment terms. It defines a PAN as the unique payment card number that identifies the issuer and the cardholder account.

The glossary also defines an issuer as an entity that issues payment cards or performs, facilitates, or supports issuing services. That is your bank or card company. So the BIN is a number that says which issuer the card came from.

Where to find the BIN on a card

Mastercard's manual says an Issuer may also be identified by the Issuer's Mastercard bank identification number printed on the Card or the magnetic stripe.

The same manual says an Issuer can be identified by the Issuer's name or logo on the Card front. So you often do not need the digits at all. The bank's name is right there.

What does the BIN tell you? It points to the issuer. What does it not tell you? It does not name you, your account, or your balance. It does not say who is holding the card.

How BINs work in a transaction

When you pay, the card number travels to a processing system. The PCI SSC glossary says an acquirer is an entity, typically a financial institution, that processes payment card transactions for merchants.

One rule from Mastercard surprises people. Its manual says a Transaction may not be declined due to bank identification number or Issuer identification number validation. So under that rule, BIN validation is not a reason to decline the sale.

BINs, fraud, and why merchants care

Some fraud aims straight at these digits.

Mastercard's manual tells acquirers and merchants how to answer. It says an acquirer must analyze each BIN attack to identify its method of operation and implement corrective measures. It also says merchants should use temporary BIN blocking when attempted fraud is evident.

That blocking is a shield, not a fix. It stops the flood for a while. The acquirer still has to work out how the attack ran.

BINs and disputes

How does this connect to a chargeback? A chargeback starts when a cardholder asks their issuer to reverse a payment.

Common questions about BINs, PINs, and card numbers

Is the BIN the same as my full card number? No. The full number is the PAN, which identifies the issuer and the cardholder account.

What is the difference between a BIN and a PIN? The BIN identifies the issuer. The PCI SSC glossary says a PIN is a secret numeric password known only to the user and a system.

How can I tell which bank issued a card? Often the bank's name is printed on the card itself. Mastercard's manual says the Issuer can be identified by name or logo on the front.

What about card data as a whole? The PCI SSC glossary defines account data as cardholder data and/or sensitive authentication data. Treat your full card number as private.

Sources