Card Numbers: Your Plastic Payment Method’s Most Crucial Identifying Factor
What’s the first thing that comes to mind when you think about your credit or debit card?
Maybe it’s the bank that issued your payment method, or the card network that it’s branded under. Or, perhaps it’s the number embossed on your card that you recall best.
If you can memorize that string of digits, plus the three-digit card verification value, and you can make purchases with thousands of retailers without having to present your physical card at all.
Maybe you’ve also wondered how those card numbers work, though. In this article, we discuss exactly that. We’ll touch on what card numbers are for, how they’re structured… and how fraudsters can take advantage of them if they’re not secured.
Recommended reading
- What is EMV Bypass Cloning? Are Chip Cards Still Secure?
- Terminal ID Number (TID): What is it? What Does it Do?
- Dispute Apple Pay Transaction: How Does The Process Work?
- What is PSD2? How it Impacts Banks, Businesses & Consumers
- P2P Payment Use in eCommerce Jumps 66% in 2024
- Visa+: Get the Most Out of Digital Wallets With This Tool
What is the Purpose of a Card Number?
In short, a card number is an identifier that connects a credit or debit card to an existing bank account or line of credit.
Card numbers allow issuers to track and authenticate transactions. When a cardholder wants to make a purchase, the card number lets the bank connect the authorization request to the right account.
Permanent card numbers also allow merchants to submit payments for processing; when a merchant accepts a credit, debit, or prepaid card, the card information is sent to the issuer for authentication and authorization. Merchants can also keep card numbers on file so that future payments can be processed automatically, without the need for manual approval from the cardholder.
Did You Know?
There were more than 1.25 billion credit cards active in the US in 2023. But, the fact each card issuer has a minimum of 15 digits to work with means there are more than one trillion possible card number combinations.
Elements of the Card Number
A card number may look like a single 15- or 16-digit number. But, it’s actually a string comprising several different indicators:
This first digit of every card number is known as the major industry identifier, or MII. This one-digit number, which ranges from 0 to 9, identifies the card network’s “major industry.” Each digit corresponds to a different major industry, which follow classifications set by the American Banking Association (ABA).
For example, card numbers for Diners Club and American Express-branded payment methods begin with a 3. This is the MII for the travel and entertainment industry, which is what American Express originally specialized in. Visa-branded cards, meanwhile, have MIIs of 4, since Visa member institutions operate in the banking and financial industry. Below is a breakdown of MIIs by major industry:
MII Value | Major Industry | Card Network (U.S. Only) |
0 | ISO/TC 68 assignment | |
1 | Airlines | |
2 | Airlines and financial (and other future industry assignments) | Mastercard |
3 | Travel & entertainment | American Express |
4 | Banking & financial | Visa |
5 | Banking & financial | Mastercard, Diners Club US |
6 | Merchandising, banking, and financial | Discover |
7 | Petroleum (and other future industry assignments) | |
8 | Healthcare and telecommunications (and other future industry assignments) | |
9 | Reserved for national standards bodies |
The first 4-to-6 digits of every card number sequence (inclusive of the MII) form the bank identification number (BIN) — also called an issuer identification number (IIN).
Each BIN is tied to a unique card issuer. This means that all cards issued by a particular financial institution bear the same number. Additionally, BINs also identify the type (i.e. debit, credit or prepaid) and level (e.g. individual, business, or corporate) of card issued.
BINs are useful because they make payments quicker and more secure. They help payment processors direct transactions to issuers for authorization, and enable both issuers and merchants to track, match, and categorize payments.
The sequence following the IIN, save for the card number’s last digit, identifies the cardholder’s account.
Also known as the account identifier or individual account identification number, this string of numbers is typically 8 to 12 digits long. It helps issuers tie transactions to a particular account. In other words, a card’s account identifier is what allows the buyer to be billed only for their purchases — nothing more, nothing less.
Also referred to as the validator digit, this last (or in Visa’s case, 13th) digit in a card number is calculated using the Luhn algorithm. It serves to help validate card numbers.
This “modulus 10” or “mod 10” algorithm was invented in the 1950s by German scientist Peter Luhn during his time at IBM, and was later patented in August 1960. It’s used in modern cards to check for transcription, transposition, or deletion errors.
This is particularly useful, since card numbers can be mistyped or corrupted due to data entry or transmission issues. That said, the Luhn algorithm is not a cryptographic algorithm; it cannot be used to stave off fraudulent attacks.
To illustrate, assume we have an account number (minus the checksum digit) of 1789372997. In the table below, we see that the sum of the resulting digits is 56, and the check digit is equal to (10 − (56 mod 10)) mod 10 = 4. This makes the full account number read 17893729974.
7 | 9 | 9 | 2 | 7 | 3 | 9 | 8 | 7 | 1 | |
Multipliers | 2 | 1 | 2 | 1 | 2 | 1 | 2 | 1 | 2 | 1 |
= | = | = | = | = | = | = | = | = | = | |
14 | 9 | 18 | 2 | 14 | 3 | 18 | 8 | 14 | 1 | |
Sum digits | 5 (1+4) | 9 | 9 (1+8) | 2 | 5 (1+4) | 3 | 9 (1+8) | 8 | 5 (1+4) | 1 |
How Do Card Numbers Get Stolen?
In 2023, scammers stole card numbers from 52 million Americans and committed roughly $5 billion worth of payment card fraud. Today, 60% of U.S. cardholders say they have been the victim of unauthorized card activity, while nearly half say they have experienced fraud more than once.
From simple tactics like physical card theft to complex ones like data breaches, here’s a rundown on how bad actors are able to steal card numbers:
What Happens if a Card Number Gets Stolen?
Card number theft doesn’t just affect cardholders. Businesses lose revenue and experience reputational damage when cardholders lose their payment methods and file chargebacks against unauthorized transactions. But, how exactly do fraudsters make use of illicitly-acquired card numbers to commit fraud?
Fight Fraud Before It Happens
Suffice to say, cardholders must take proactive measures to protect their card numbers from theft. They need to use strong passwords, regularly monitor their accounts, keep their card information private, and swiftly contact issuers to report lost cards.
Merchants have an important role to play as well. By deploying 3-D Secure and other fraud prevention tools at checkout, sellers can curb unauthorized activity, mitigate the risk of illicit chargebacks, and secure buyer information from data breaches and malicious attacks.
Of course, protecting customers’ card numbers may not be enough to dissuade all fraud attacks. For instance, what about first-party fraud? This is why merchants need to think about detecting bad actors as just one part of a broader strategy to tackle revenue loss.
Learn more about fraud prevention
FAQs
Can you identify cards by first 4 digits?
Sometimes. The first 4-to-6 digits of a card number represent the bank identification number, or BIN. This number ties the card to the bank or financial institution that issued it.
How do i find my card number?
Your card number is typically a 15- or 16-digit number located on the back of your card (or the front, the case of Amex cards). You may also be able to find your card number by logging into your account online via desktop or mobile app, or by taking a look at your monthly card statements.
Is it safe to give a 16-digit credit card number to someone else?
No. It’s not a safe practice to share your credit card number with anyone else, even family or close friends. If someone wants you to make a purchase for them, ask them for a shipping address so that you can make the purchase on their behalf. If feasible, you can also ask them to meet in person so that you can complete the transaction with them by your side.
What are the first 4 digits of a Visa card?
The first 4 digits of a Visa card is the bank identification number (BIN), also known as an issuer identification number (IIN). Each bank and non-bank issuer is assigned a unique four-digit BIN/IIN, and all cards issued by that institution will bear card numbers that begin with the same BIN/IIN.
Is the card number always 16 digits?
Not always. Visa, Mastercard, and Discover-branded cards feature 16-digit card numbers. American Express, however, is the one exception: its cards have numbers that are 15 digits long.
This post Card Numbers appeared first on Chargebacks911