What is an Issuer Identification Number (IIN)?

An Issuer Identification Number (IIN) is the first 6 to 8 digits of a payment card number that identify the financial institution that issued the card. When a card is presented for payment, the IIN tells the payment network which bank or issuer to contact for authorization before any account details are checked.

The IIN is part of the card's Primary Account Number (PAN), which is the full card number embossed or printed on the card. The remaining digits after the IIN identify the individual cardholder account, with the final digit serving as a check digit used to validate the number's integrity.

What is the difference between an IIN and a BIN?

IIN and BIN (Bank Identification Number) refer to the same thing. BIN is the older term, introduced when the standard was first established and card issuers were predominantly banks. IIN is the current official term used by ISO (the International Organization for Standardization), which maintains the standard under ISO/IEC 7812.

In practice, the two terms are used interchangeably across the payments industry. Processor documentation, fraud tools, and card scheme references may use either. When someone talks about a BIN lookup or a BIN range, they mean the IIN.

What does an IIN tell you?

The IIN encodes several pieces of information about the card, all of which are resolved before the transaction reaches the issuer.

• Card network: The very first digit of the IIN, called the Major Industry Identifier (MII), indicates the card network. Visa cards begin with 4, Mastercard with 5 (or 2 for newer ranges), American Express with 3, and Discover with 6
• Issuing institution: The full IIN identifies the specific bank, credit union, or fintech that issued the card
• Card type: Whether the card is a credit, debit, or prepaid card
• Card product: The specific product tier, such as a standard, gold, or corporate card
• Country of issuance: The country where the issuing institution is based

This information is resolved by looking up the IIN against a reference database, often called a BIN table, maintained by card schemes and third-party data providers.

Where does the IIN appear on a card?

The IIN is the opening sequence of the full card number printed on the front of the card. For a standard 16-digit card number, the IIN occupies the first 6 digits under the original ISO standard, or the first 8 digits under the extended format introduced in 2017 to accommodate the growing number of card issuers globally.

The cardholder typically sees the full PAN, not just the IIN. In payment systems, the PAN is usually masked for security, with only the first 6 digits (the IIN) and the last 4 digits displayed, for example: 476200xxxxxx4321.

How is the IIN used in payment processing?

The IIN is read at the very start of a transaction, before authorization is attempted. It drives several routing and processing decisions.

• Transaction routing: The IIN tells the payment gateway or processor which card network and issuer to contact for authorization. Without it, the system would not know where to send the request.
• Interchange fee calculation: Interchange rates vary by card type, product tier, and country of issuance, all of which are encoded in the IIN. Merchants and acquirers use IIN data to estimate the cost of accepting a given card before the transaction is finalized.
• Fraud and risk scoring: Many fraud detection systems use the IIN to flag mismatches, for example, a card issued in one country being used in another, or a prepaid card being used where credit cards are expected. IIN data is a standard input into payment reconciliation and transaction monitoring workflows.
• 3D Secure and authentication routing: The IIN determines whether a card is enrolled in 3D Secure and which authentication endpoint to use, which affects how the cardholder is prompted during checkout.

Who assigns IINs?

IINs are assigned by the American Bankers Association (ABA) in coordination with ISO, under the ISO/IEC 7812 standard. Card networks such as Visa and Mastercard then allocate IIN ranges to their issuing banks and program managers. A single institution may hold multiple IIN ranges if it issues different card products or operates across multiple countries.

Fintech companies that issue cards through a licensed issuing bank or via a card program manager receive an IIN range allocated by the card scheme, typically under the issuing bank's license rather than their own.

Who are IINs important for?

The IIN sits at the foundation of how card payments are routed and priced, so it surfaces across several different functions.

• Payment engineers and integrations teams work with IIN data directly when building card acceptance flows, routing logic, or fraud rules. Correctly parsing the IIN from the PAN is a basic requirement for any card processing implementation.
• Risk and fraud teams use IIN databases to enrich transaction data, flag anomalies, and build rules around card type, issuing country, or product tier. IIN mismatch is one of the more reliable early signals in card fraud detection.
• Finance and commercial teams at merchants and platforms use IIN data to understand their card mix and model interchange costs. Because interchange rates differ significantly between consumer debit, premium credit, and corporate cards, knowing the IIN breakdown of incoming transactions directly affects margin calculations.
• Fintech companies issuing cards need to understand how IIN ranges are allocated and what obligations come with holding or operating under one, particularly around scheme compliance and transaction reporting.

For platforms processing card payments across multiple markets, understanding IIN data is one part of a broader need for visibility into the full flow of funds, from card authorization through to final settlement. Due's payment API connects fintechs to local rails and settlement infrastructure across 80+ countries, covering both card and non-card payment flows through a single integration.

‍