POST AI agent ready /v1/bin/lookup

BIN Lookup API - Card Issuer, Type & Country from BIN/IIN

Accepts the first 6-8 digits of a payment card (BIN or IIN) and returns the card scheme (Visa, Mastercard, etc.), card type (debit/credit), brand, issuing bank details, country of issuance, and whether the card is prepaid.

Endpoint

Code examples

curl -X POST https://api.botoi.com/v1/bin/lookup \
  -H "Content-Type: application/json" \
  -d '{"bin":"45717360"}'

When to use this API

Payment fraud detection

Compare the BIN country against the billing address country submitted by the customer. A mismatch (e.g., a Lithuanian card used with a US billing address) is a strong fraud signal. Route flagged transactions through manual review or 3D Secure verification.

Dynamic checkout UX

As the user types their card number, look up the BIN after 6 digits. Display the correct card logo (Visa, Mastercard), auto-select the card type, and show the issuing bank name. This reduces input errors and builds trust in the checkout flow.

Prepaid card restrictions

Some merchants or subscription services block prepaid cards to reduce churn and refund abuse. Check the prepaid field during card validation and display a clear message asking the customer to use a non-prepaid card.

Frequently asked questions

What is a BIN/IIN?

A Bank Identification Number (BIN), also called Issuer Identification Number (IIN), is the first 6-8 digits of a payment card number. It identifies the card network (Visa, Mastercard), issuing bank, card type, and country of issuance.

Is it safe to transmit the first 6-8 digits?

Yes. PCI DSS allows the first 6 and last 4 digits of a card number to be stored and transmitted in plaintext. The BIN alone cannot be used to make a payment or identify a cardholder.

What card schemes are supported?

The database covers Visa, Mastercard, American Express, Discover, JCB, UnionPay, Diners Club, Maestro, and other regional schemes. Coverage varies by region but includes the vast majority of cards in active circulation.

Can the bank field be null?

Yes. Some BIN ranges, especially for newer fintechs or virtual card issuers, may not have bank name or URL data. The bank object is always present, but individual fields within it (name, url, phone) can be null.

How current is the BIN database?

The BIN database is updated monthly with new ranges from card networks. New card programs from fintechs or regional banks are added as they become available in public BIN registries.

Get your API key

Free tier includes 5 requests per minute with no credit card required. Upgrade for higher limits.