Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                

GL Ops 1705019 BIN Expansion Mandate and Best Practices 8 Digit BINs and Account Ranges

Download as pdf or txt
Download as pdf or txt
You are on page 1of 12

BIN Expansion Mandate and Best

Practices (8-Digit BINs and Account


Ranges)
Topic(s): Cirrus, Maestro, Mastercard, Rules/Standards

May Apply To: Acquirers Issuers Processors

Summary: Mastercard is mandating account range level processing


for acquirers (and their processors), and directing issuers
to account range utilization in support of the 8-digit bank
identification number (BIN) standard.

Action Indicator: M Mandate

T Testing required

A Attention warranted

Effective Date: April 2022, in alignment with Release 22.Q2

Background
BINs uniquely identify networks, issuers, and other important information
across the Mastercard payments ecosystem. BINs are a fundamental element of
electronic payments and must be managed effectively. A continuous supply of
BINs is necessary to ensure a sustainable, safe, and secure global payments
ecosystem, enabling growth and innovation in an increasingly digital world.

Mastercard began a phased approach addressing BIN supply challenges a


number of years ago, and in 2014 began addressing issues regarding increasing
BIN demand. Mastercard has launched 2 series BINs and has been working
with our customers to gain understanding and acceptance of this new BIN
range (222100–272099). 2 series BINs will greatly increase the number of BINs
available to our customers, and will be instrumental to our strategies. Further,
2 series BINs will ensure the adequacy of our Mastercard BIN supply.

Mastercard has issued regional bulletins describing customer best practices


that leverage both account range and product consolidation opportunities.
Mastercard has introduced new global BIN pricing structures designed to
encourage full utilization of customer assigned BINs.

BIN Expansion Mandate and Best Practices (8-Digit BINs and Account Ranges)
Global Operations Bulletin No. 5, 1 May 2017 19
©2017 Mastercard. Proprietary. All rights reserved.

Production Review—Due
Increasing BIN demand across the entirety of the electronic payments
ecosystem has brought about the need for the extension of BINs from the first
six digits of a primary account number (PAN) to the first eight digits of a PAN,
with no change to PAN length. Emerging payment technologies requiring
tokenization have impacted BIN demand, as tokenization requires the use
of multiple PANs for a single account. BIN extension is an ecosystem-wide
effort in which Mastercard will participate. The International Organization for
Standardization (ISO) announced a new 8-digit IIN standard (the ISO term
for a BIN) in 2016 (ISO/IEC 7812-1, ISO/IEC 7812-2) and published the new
standard in 2017. Mastercard recognizes that BINs must be leveraged efficiently
in order to ensure our customer’s ongoing ability to launch new programs
and technologies into new markets.

The next phase of Mastercard’s approach further drives an emphasis on BIN


efficiency using account ranges. Mastercard’s strategy is to direct issuers to use
account ranges within BINs to segment portfolios, define different product
codes, and provide other capabilities and benefits. Account ranges allow a
customer to maximize the full potential of each Mastercard BIN. This strategy
leverages existing requirements for Mastercard customers to support 11-digit
account ranges.

Mastercard will adopt the ISO 8-digit BIN standard and will begin assigning
8-digit BINs to issuers by request, effective April 2022. Our BIN management
efforts enable Mastercard to be a flexible partner for issuers through this
transition. Mastercard will direct issuers to utilize account ranges as a best
practice. Use of account ranges will help facilitate a smooth transition to 8-digit
BINs, which are compatible with new payment flows and technologies.

To help ensure ecosystem readiness, Mastercard is mandating that all acquirers


and their third party processors (TPPs) be able to support 11-digit account
ranges and the 8-digit BIN standard by April 2022. Mastercard’s longer term
strategy is to prepare for the future and move the ecosystem fully to account
range processing.

Account Ranges
Mastercard customers use account ranges to maximize efficient use of a BIN.

Currently, account ranges are considered to be up to the first 11 digits of a


PAN, including the 6-digit BIN.

BIN Expansion Mandate and Best Practices (8-Digit BINs and Account Ranges)
20 Global Operations Bulletin No. 5, 1 May 2017
©2017 Mastercard. Proprietary. All rights reserved.

Production Review—Due
In the future, account ranges will remain up to the first 11 digits of a PAN,
including the 8-digit BIN, and PAN length will remain the same.

Consistent account range length allows the seamless transition from a 6-digit to
an 8-digit BIN as full account range digits include the full BIN. For example,
card 5412 7512 3412 3456 has account range 5412 7512 341. Today, the BIN
can be identified by the first 6 digits: 5412 75. After April 2022, the BIN will be
identified by the first 8 digits. With both of these BIN standards, the account
range will be consistent.

Account ranges will be used to support different markets, product codes, and
other parameters that have traditionally been associated with a 6-digit BIN.

Acquirer Mandate
Acquirers (and their TPPs) must be able to support the full account range (up
to 11 digits) and 8 digit BINs by April 2022, in alignment with Release 22.Q2.

Acquirers are responsible for ensuring that their merchants, payment facilitators,
payment gateways, third party vendors, and all other service providers be able
to support account range processing and the 8-digit BIN standard by April 2022.

BIN Expansion Mandate and Best Practices (8-Digit BINs and Account Ranges)
Global Operations Bulletin No. 5, 1 May 2017 21
©2017 Mastercard. Proprietary. All rights reserved.

Production Review—Due
This mandate applies to all Mastercard®, Maestro®, and Cirrus® products
(credit, debit, and prepaid product types, both consumer and commercial).

Acquirers and their TPPs that do not utilize full account range level data will
be at risk of processing transactions incorrectly, or being unable to process
transactions. This could result in a number of issues, including, but not limited
to:
• Incorrect interchange rate application
• Transaction declines and lost sales volume that lead to merchant and
cardholder dissatisfaction

For example, a customer may be assigned the 8-digit BIN: 54127512. That
customer may split that 8-digit BIN into the following account ranges.

Account Range for BIN 54127512

From Through Products

54127512 000 54127512 554 Consumer Credit Gold (555 ranges)

54127512 555 54127512 799 Consumer Credit Platinum (245


ranges)

54127512 800 54127512 999 Inactive/non-issued range (200


ranges)

Mastercard BIN requirements for product code classifications are currently


defined by region, and will remain intact for 6-digit BINs until April 2022,
when these classifications will then apply to 8-digit BINs. For example,
consumer and commercial products must be issued out of unique BINs. (See
updated guidelines and best practices for each region set forth in the Related
Information section of this article.)

The Acquirer BIN (data element [DE] 31 [Acquirer Reference Data], subfield 2
[Acquirer BIN]) will be relabeled as the Acquirer Reference ID effective April
2022. The field information in clearing will not change, but the Acquirer
Reference ID will no longer be considered as a Mastercard ISO BIN. Instead,
Acquirer Reference IDs will remain as 6-digit numeric identifiers.

Mastercard will continue to send profile files to acquirers and processors at the
account range level. These files include:
• Single Message System—Financial Institution Table (FIT)
• Dual Message System (Clearing)—Integrated Product Messages Mastercard
Parameter Extract (IPM MPE)
• Dual Message System (Authorization)—BIN Table Resource File

BIN Expansion Mandate and Best Practices (8-Digit BINs and Account Ranges)
22 Global Operations Bulletin No. 5, 1 May 2017
©2017 Mastercard. Proprietary. All rights reserved.

Production Review—Due
Testing
Acquirer and TPP (acquiring) testing will begin in April 2019, in support of
the 8-digit BIN standard. Further details regarding testing and implementation
related to 8-digit BIN expansion and account range processing, along with
other technical information, will be provided in Release 17.Q4, as well as
subsequent releases until the go-live date for 8-digit BINs. Refer to an
upcoming release article for more information, available in the Release
Information Center on Mastercard Connect™.

Time Line
Based on strong feedback from our customers, the current effective date for
the 8-digit BIN standard is April 2022, aligned with Release 22.Q2.

Additional Acquirer and TPP Information


For more information regarding account range level files, refer to the article
“Requirement to Maintain Accurate BIN Tables,” published in Global Operations
Bulletin No. 4, 1 April 2014. That bulletin includes details regarding usage of
these tables for transaction processing and merchant system updates.

An Account Range Management manual will be introduced in early 2018. The


manual will serve as a guide for customers to access all information related to
account range management and the adoption of new digital payment flows.

2 Series BIN Mandate Reminder


The 2 series BIN was mandated as of October 2016, as described in “Global
514—Introduction of New 2 Series Mastercard BIN Range—Update,” published
in Release 16.Q4. This remains a priority, and Mastercard already has begun to
issue 2 series BINs in selected markets. 2 series BIN assignments to issuers will
continue with increased frequency. Accordingly, acquirers and their processors
are reminded that all merchants and acceptance points of interaction are
required to be “2 series BIN” compliant by 30 June 2017.

Issuer Account Range Recommendation


Mastercard strongly recommends that issuers maximize use of BINs through the
use of account ranges and ensure that their TPPs promptly take steps to also
support the use of account ranges. Account ranges allow for multiple programs
and products to be assigned using a single BIN. Issuers are encouraged
to analyze their current portfolios in order to determine if their assigned
Mastercard BINs can be used more efficiently with account ranges and return
any unused BINs. Mastercard will continue working with customers in order
to maximize account range utilization across their Mastercard BINs. Issuers
are also encouraged to ensure that current and future systems are enhanced
to support 8-digit BINs and account ranges, especially if those issuers plan to
launch new payment flows and digital payment schemes.

BIN Expansion Mandate and Best Practices (8-Digit BINs and Account Ranges)
Global Operations Bulletin No. 5, 1 May 2017 23
©2017 Mastercard. Proprietary. All rights reserved.

Production Review—Due
When requesting a new program, issuers are encouraged to utilize an existing
Mastercard BIN. Assigned BINs can be split into multiple products using
account ranges. Product families may be differentiated by each region—guided
by local rules, regulations, and regional practices. Within a given BIN, account
ranges can be defined for:
• Different product codes within a product family (defined by each region)
within Mastercard
• Different countries of issuance (where central issuing is allowed) within
Mastercard
• Different rewards and loyalty offerings

Refer to the updated guidelines and best practices for each region, outlined
in the Related Information section of this article.

Besides products, issuers may have further segmentation of BINs by services


or other parameters. For example:
• Opting for value added products and services
• Using different currencies

Allowing for future growth of our customers, the use of account ranges
improves safety and security by limiting the vulnerability of unused BIN ranges.
Mastercard recommends that issuers activate only those account ranges for
programs that will be issued in the near-term. This can increase safety and
security by helping to ensure transactions from PANs falling outside an active
account range are declined by Mastercard and will not be sent to the issuer or
approved during Stand-In processing.
NOTE
Issuers must ensure their platforms are capable of handling account range
use before they define portfolios at the account range level. This includes,
among other things, online banking and cardholder statements, host systems,
fraud and dispute management, card design and personalization, loyalty and
rewards, and customer service.

Current 6-digit Mastercard BINs will be regarded as 8-digit BINs beginning


April 2022. This means that each 6-digit BIN (for example, 541275) will
become 100 8-digit BINs, as shown in the following table.

BIN Length BIN Range

6-digit BIN 541275

8-digit BINs 541275-00 through 541275-99

Issuers may continue to manage their portfolios using their current data
structure. However, be aware that 6-digit BINs will become 100 8-digit BINs
starting in April 2022.

BIN Expansion Mandate and Best Practices (8-Digit BINs and Account Ranges)
24 Global Operations Bulletin No. 5, 1 May 2017
©2017 Mastercard. Proprietary. All rights reserved.

Production Review—Due
TPPs (Issuing)
TPPs (issuing) should support the full account range (up to 11 digits) and
8-digit BINs by April 2022, in alignment with Release 22.Q2.

Testing
Optional testing for issuers and TPPs (issuing) will begin in April 2019, in
support of the 8-digit BIN standard. Further details regarding testing and
implementation related to 8-digit BIN expansion and account range utilization,
along with other technical information, will be provided in a future release
article, as well as subsequent releases until the go-live date for 8-digit BINs.

Time Line
Based on strong feedback from our customers, the current effective date for
the 8-digit BIN standard is April 2022, aligned with Release 22.Q2.

Additional Issuer Information


An Account Range Management manual will be introduced in early 2018. The
manual will serve as a guide for customers to access all information related to
account range management and the adoption of new digital payment flows.

2 Series BIN Mandate Reminder


The 2 series BIN was mandated as of October 2016, as described in “Global
514—Introduction of New 2 Series Mastercard BIN Range—Update,” published
in Release 16.Q4. This remains a priority, and Mastercard already has begun to
issue 2 series BINs in selected markets. 2 series BIN assignments to issuers will
continue with increased frequency. Accordingly, acquirers and their processors
are reminded that all merchants and acceptance points of interaction are
required to be “2 series BIN” compliant by 30 June 2017.

Mastercard Connect: My Company Manager


Mastercard will introduce “My Company Manager” as a part of the new
Mastercard Connect in 2017. Account range management is front and center
in this new platform. Customers will have the ultimate flexibility of choosing
account ranges of any combination following the 6-digit BIN up to the 11th
digit, though Mastercard recommends creating account ranges from the 9th
to 11th digit.

BIN Expansion Mandate and Best Practices (8-Digit BINs and Account Ranges)
Global Operations Bulletin No. 5, 1 May 2017 25
©2017 Mastercard. Proprietary. All rights reserved.

Production Review—Due
This self-service platform will allow customers to see their entire portfolio,
request new BINs, and define account ranges within both new and existing
BINs. Customers will be able to manually set account ranges to dictate specific
segmentations in their portfolio data structures. More specifically, customers
that currently have specific uses for positions 7, 8, 9, 10, or 11 can continue by
requesting these ranges as such. The platform will speed time to market for
new customer programs, create better BIN efficiency, and improve the overall
customer experience. Mastercard expects this platform to naturally drive wider
adoption and use of account ranges.

My Company Manager will continue to manage account ranges within


customer BINs, and will be capable of assigning and maintaining programs
using both 6-digit and 8-digit BINs.

Overview of Revised Standards


Please review the revisions to the publications indicated in the table below and
make appropriate plans to support the revised Standards.

Effective Date Changes to Standards in… Will be Published in…

April 2022, in Mastercard Rules Chapter 3—Customer


alignment with Release Obligations
22.Q2 Chapter 18—Mastercard
Mobile Rules
Appendix C—Definitions

April 2022, in Transaction Processing Chapter 1—Connecting to


alignment with Release Rules the Interchange System and
22.Q2 Authorization Routing
Appendix
D—Cardholder-Activated
Terminal (CAT) Transactions
Appendix H—Definitions

April 2022, in Security Rules and Chapter 3—Card and Access


alignment with Release Procedures Device Design Standards
22.Q2 Appendix D—Definitions

Mastercard will incorporate the revised Standards into a future edition of


these manuals. The manuals are available on Mastercard Connect™ via the
Publications product.

Revised Standards—Mastercard Rules


Mastercard will revise the Mastercard Rules to include these Standards.
Additions to the Standards are underlined. Deletions are indicated with a
strikethrough.

BIN Expansion Mandate and Best Practices (8-Digit BINs and Account Ranges)
26 Global Operations Bulletin No. 5, 1 May 2017
©2017 Mastercard. Proprietary. All rights reserved.

Production Review—Due
Chapter 3—Customer Obligations

3.18 BINs
The Corporation may assign a Customer that engages in or is approved by the
Corporation to engage in Activity one or more bank identification numbers
(BINs).

The Corporation may assign BINs at its discretion from the following block
ranges:
• Mastercard: 22210000 to 27209999 and 51000000 to 55999999
• Maestro: 63900000 to 63909999 and 67000000 to 67999999

Use of a BIN may not be sublicensed or re-assigned or otherwise transferred


without the prior express written consent of the Corporation.

The Corporation may:


• Review a Customer’s BIN usage for compliance with the Standards; and
• Retract the assignment of any BIN that has been assigned to a Customer.

Chapter 18—Mastercard Mobile Rules

Mastercard Mobile Rules


Definitions
The terms appearing in the Definitions section of this manual are defined and
used herein with respect to Mastercard Mobile cardholders (“Cardholders”),
issuers (“Issuers”), acquirers (“Acquirers”), merchants (“Merchants”) and
transactions (“Transactions”). As used in these Mastercard Mobile Rules, the
following terms replace those appearing in the Definitions section:

Mastercard Account
Any type of account (for example, credit, debit, and prepaid), including a
Mastercard Mobile account held by the Issuer on behalf of the Mobile Network
Operator (MNO), that is maintained by or on behalf of a Cardholder with
an Issuer for the processing of Transactions, and which is identified with
a primary account number (PAN) that begins with a BIN in the range of
51000000 to 55999999.

BIN Expansion Mandate and Best Practices (8-Digit BINs and Account Ranges)
Global Operations Bulletin No. 5, 1 May 2017 27
©2017 Mastercard. Proprietary. All rights reserved.

Production Review—Due
Appendix C—Definitions

Mastercard Account
Any type of account (credit, debit, prepaid, commercial, etc.) identified as a
Mastercard Account with a primary account number (PAN) that begins with a
BIN in the range of 22210000 to 27209999 or 51000000 to 55999999.

Revised Standards—Transaction Processing Rules


Mastercard will revise the Transaction Processing Rules to include these
Standards. Additions to the Standards are underlined. Deletions are indicated
with a strikethrough.

Chapter 1—Connecting to the Interchange System and


Authorization Routing

1.2 Authorization Routing—Mastercard POS Transactions


On an ongoing basis, an Acquirer of Mastercard POS Transactions must
recognize all active Mastercard bank identification numbers (BINs) for purposes
of obtaining Transaction authorizations, and obtain such authorizations on
behalf of each of its Merchants as the Standards require. If the Acquirer
uses Account range files provided by Mastercard for this purpose, such files
must be loaded and functioning on the Acquirer’s host system and available
to its Merchants for use within six calendar days from the date that each
updated file is distributed. Upon receipt of an updated Account range file
from Mastercard, an Acquirer must confirm via an acknowledgment file that it
updated its host systems accordingly. Alternatively, the Acquirer may submit
all authorization requests containing an Account number with a BIN in the
22210000 to 27209999 and 51000000 to 55999999 range to the Interchange
System for routing to the Issuer.

Appendix D—Cardholder-Activated Terminal (CAT)


Requirements

CAT Level Requirements


CAT Level 4: In-Flight Commerce (IFC) Terminals (CAT 4)
The following authorization requirements apply to CAT 4 devices: 1. Prior to
authorization, the Merchant must conduct a Mod-10 check digit routine to
verify Card authenticity and must confirm that the Account number is within
Mastercard BIN range 22210000 to 27209999 or 51000000 to 55999999.

BIN Expansion Mandate and Best Practices (8-Digit BINs and Account Ranges)
28 Global Operations Bulletin No. 5, 1 May 2017
©2017 Mastercard. Proprietary. All rights reserved.

Production Review—Due
Appendix H—Definitions

Mastercard Account
Any type of account (credit, debit, prepaid, commercial, etc.) identified as a
Mastercard Account with a primary account number (PAN) that begins with a
BIN in the range of 22210000 to 27209999 or 51000000 to 55999999.

Revised Standards—Security Rules and Procedures


Mastercard will revise the Security Rules and Procedures to include these
Standards. Additions to the Standards are underlined. Deletions are indicated
with a strikethrough.

Chapter 3—Card and Access Device Design Standards

3.2 Mastercard Account Number


The primary account number (PAN) of a Mastercard Account must be 16 digits
in length. The PAN includes the Issuer’s bank identification number (BIN),
Issuer-assigned portion of the Account number, and a check digit calculated
using the Luehn Formula for Computing Modulus 10 (“Double-Add-Double”)
Check Digit. A Mastercard Account PAN begins with a BIN in the range of
22210000 to 27209999 or 51000000 to 55999999. A Mastercard Account must
use a Mastercard-assigned BIN.

Appendix D—Definitions

Mastercard Account
Any type of account (credit, debit, prepaid, commercial, etc.) identified as a
Mastercard Account with a primary account number (PAN) that begins with a
BIN in the range of 22210000 to 27209999 or 51000000 to 55999999.

BIN Expansion Mandate and Best Practices (8-Digit BINs and Account Ranges)
Global Operations Bulletin No. 5, 1 May 2017 29
©2017 Mastercard. Proprietary. All rights reserved.

Production Review—Due
Related Information
• “Updated Mastercard BIN Management Guidelines and Best Practices,”
published in Middle East/Africa Region Operations Bulletin No. 2, 12 April
2017
• “Updated Mastercard Guidelines and Best Practices for BIN Management
and Account Ranges,” published in Asia/Pacific Region Operations Bulletin
No. 3, 17 March 2017
• “Updated Mastercard BIN Management Guidelines and Best Practices,”
published in Europe Region Operations Bulletin No. 12, 1 December 2016
• “Global 514—Introduction of New 2 Series Mastercard BIN Range—Update,”
published in Release 16.Q4
• “Changes to the Issuer Identification Number (IIN) Standard,” published at
iso.org, 21 November 2016
• “Updated Mastercard BIN Management Guidelines and Best Practices,”
published in Latin America and Caribbean Region Operations Bulletin
No. 7, 24 October 2016
• “Updated Mastercard BIN Management Guidelines and Best Practices,”
published in Canada Region Operations Alert No. 7, 29 August 2016
• “Updated Mastercard BIN Management Guidelines and Best Practices,”
published in U.S. Region Operations Bulletin No. 7, 9 June 2016
• “Requirement to Maintain Accurate BIN Tables,” published in Global
Operations Bulletin No. 4, 1 April 2014
• Mastercard BIN Expansion Information Center

Questions?
Customers with questions about the information in this article should contact:

BIN Inquiries

Email: bin_inquiries@mastercard.com

BIN Expansion Mandate and Best Practices (8-Digit BINs and Account Ranges)
30 Global Operations Bulletin No. 5, 1 May 2017
©2017 Mastercard. Proprietary. All rights reserved.

Production Review—Due

You might also like