BIN Lookup Test: What It Checks and How to Run One

Our Cards

Choose from any of our gift cards to give to your loved ones

giftcardimage

Where to Use?

Redeem your gift cards at any of our Merchants

Where to Buy?

You can purchase a gift card from any of these locations

ABOUT US

about

What is ONYX GiftCards?

Onyx Gift Cards is a Grenadian company designed to introduce, market and manage gift cards systems in Grenada for retailers and corporations. We are enthusiastic about the effect and influence we will have on the local market. We intend to expand our systems regionally with a range of product offerings and services.

What is a Gift Card?

Gift cards are the preferred way of giving and receiving gifts. They carry a monetary value that can be redeemed for gifts at your favorite store.
Onyx GiftCards are “Open Gift Cards” which means that they can be redeemed at multiple merchant locations. They are standard credit card size, can fit into the average wallet and made of PVC plastic. Onyx GiftCards are Barcoded for security and safety for the consumer and bear a disclaimer at the back.
Onyx Giftcards can be bought with a branded Card backer which is black in colour and is designed to fit the card. There is an area to write a brief message to the recipient as well.

How it Works?

  • Buy an Onyx Gift Card at these local stores
  • Give your gift card to friends, family, co-workers, etc.
  • The recipient can shop at our select merchants nationwide
  • Your friends, family, co-workers, etc. will present their gift card at checkout to pay for your item(s)
  • They will walk away happy with the best gift ever...the gift of Choice

Why ONYX GiftCards?

  • Save TIME. No need to run around looking for the perfect gift
  • Redeem from a variety of business island-wide. We will continue adding businesses as fast as ONYX grows.
  • ONYX Gift Cards do not expire
  • Cards are valued at convinient amounts to meet every need and occasion

A BIN lookup test checks whether the first six to eight digits of a card number resolve to the correct issuing bank, card brand, funding type, and country. Payment teams run it to catch stale or mismatched BIN table data before that data reaches the authorization stream. It is a data quality check on static range records, not a way to test whether a card is live, funded, or safe to charge.

What does a BIN lookup test verify?

A BIN lookup returns the attributes tied to a registered issuer range: brand, issuer name, card type (credit, debit, prepaid), issuer country, and sometimes currency. The test compares those returned values against what your own systems recorded at capture.

Since the shift to eight-digit issuer identification numbers, legacy six-digit tables return fewer matches. A test that uses six-digit lookups against modern ranges will report false mismatches.

How do you run a BIN lookup test?

  1. Pull a sample of BINs from your own transaction, vault, or token records, not from third-party lists.
  2. Query each BIN against your BIN database or a licensed provider, and log the full response.
  3. Compare brand, issuer country, funding type, and card category against your stored values field by field.
  4. Flag mismatches, then re-check them against the card brand's published range files before changing any rule.
  5. Re-run the test on a schedule and after any processor or provider change.

Why does BIN data go stale?

Issuer portfolios migrate between banks, prepaid programs open and close ranges, and brands assign new eight-digit blocks. Issuer names also change after mergers, which breaks exact-match string comparisons.

Most teams refresh BIN tables monthly and after every brand range release. Anything older than a quarter will drift on prepaid and debit ranges first.

What errors does a BIN test usually catch?

BIN lookup vs card verification

CVV and address verification checks happen at authorization, when the issuer responds to a live request. A BIN lookup reads static range data and cannot confirm that a card is active, has funds, or belongs to the person presenting it.

Using BIN lookups to screen or rank card numbers you do not own is card fraud, and it is prosecuted as such in the US. Legitimate uses are merchant routing, fraud scoring, and reconciliation on transactions you processed.

Frequently asked questions

Is a BIN lookup test the same as a zero-dollar authorization?

No. A zero-dollar or account verification request goes to the issuer and returns a live response. A BIN lookup never contacts the issuer.

How often should BIN tables be refreshed?

Monthly is the practical baseline. Refresh immediately when a brand announces new ranges or when your decline patterns shift on a specific portfolio.

Does a BIN test fall under PCI DSS scope?

BIN data alone is not cardholder data, but the systems around it often are. Keep test datasets masked, restrict access, and never store sensitive authentication data alongside BIN records.

Contact Us

Latest

CVV Attack Alert

Stay protected with our CVV Attack Alert system. Get instant notifications and safeguard your finances.

CVV Attack Pattern

Discover the ins and outs of CVV attack patterns to protect your online transactions.

CVV Attack IOCs: Signals to Monitor

CVV attack IOCs are the log signals of a card-testing run: authorization bursts, high decline rates, narrow BIN sets, and low dollar amounts.

Read our complete guide: Should You Buy CVV From a Card Shop? The Honest Buyer's Guide