Complete guide to Bank Identification Numbers, card verification, fraud prevention, and BINSearchLookup API integration - Updated September 2025
Typical fields include BIN/IIN, Brand (network), Type (credit/debit/prepaid), Category (product class), Issuer name, isoCode2/isoCode3 and CountryName.
Accuracy depends on source feeds and update cadence; check the result's displayed update timestamp and the Report an Error link to request corrections. Data are sourced from official network and issuer registrations, data-sharing agreements, and curated references, primarily from payment networks and participating issuers.
BIN lookups are lawful for verification, fraud screening and reconciliation. Use results only for legitimate business purposes, avoid attempting to reidentify cardholders from BINs, and follow applicable privacy and data protection laws.
BIN/IIN indicates the product type at issuance. Issuers can reissue, reprogram or remap ranges over time; when in doubt, confirm with the issuing bank or processor.
BIN lookup returns the issuing country via isoCode2/isoCode3 and CountryName. Currency is not reliably encoded in IIN/BIN data and must be verified with the issuer or payment network.
No. IIN/BIN identifies the issuing institution and product block but does not identify individual branches or account holders; the remainder of the PAN and issuer systems map to accounts and are protected by privacy rules.
Use BIN data as one signal in a layered defense: validate brand, expected country of issue, and product type; compare issuing country to IP, billing, and shipping; escalate mismatches to AVS, CVV, 3‑D Secure, and velocity checks.
Apply higher scrutiny to risky combinations such as high‑value cross‑border orders on prepaid cards; and route edge cases to manual review with clear accept, challenge, or decline rules.
BIN and IIN refer to the same concept, however the terms reflect different conventions. ISO/IEC 7812-1:2017 formalizes the term IIN and expanded the standard to an 8‑digit IIN, while the industry historically used the term BIN and 6‑digit ranges.
Many systems now support 8‑digit IINs, some still reference 6‑digit BINs for routing or reporting, and resources often use BIN/IIN interchangeably to cover both.
Brand = payment network (e.g., Visa, Mastercard); Type = credit, debit or prepaid; Category = product class or program name. See our glossary for exact field definitions and examples.
Yes — issuing country and card type are useful indicators for potential cross-border fees and dynamic currency conversion risk, but fee specifics come from the processor/acquirer and merchant service agreements.
Submit 6 to 8 BIN digits to our JSON endpoint; see the Developer page for authentication, field specifications, and code samples. Rate limits depend on your tier: free accounts get 100 queries/hour, paid tiers offer higher throughput.
Empty results may indicate unallocated BIN ranges, test card numbers, or coverage gaps. Check that you're using a real card number, verify the BIN length (6-8 digits), and use the Report an Error feature to request database updates for legitimate missing entries.
Our database receives weekly updates from network and issuer sources, with critical changes processed within 24-48 hours. New BIN allocations and issuer changes are reflected as soon as official notifications are received and validated.
Yes — all communications use HTTPS/TLS encryption, we maintain PCI DSS compliance, and adhere to GDPR/CCPA requirements. BIN data is non-sensitive public information, but we implement security best practices and minimal data retention policies.
Enterprise accounts support bulk processing via CSV upload and batch API endpoints. Contact our sales team for volume pricing and custom integration options. Standard accounts can use the API with appropriate rate limiting for smaller batch operations.
We offer a free tier with 100 queries/hour for testing and small-scale usage. Paid plans start at $19/month for 10,000 queries with higher rate limits. Enterprise customers receive custom pricing based on volume and specific requirements.