PDA

View Full Version : Prevent credit card fraud and chargebacks


BINs
27th December 2008, 15:50
Prevent credit card fraud and chargebacks using up-to-date BIN databases.

Current versions:
VISA 45647 BINs
MC 29347 BINs
AMEX 6232 BINs
JCB 6232 BINs
DINERS 5998 BINs

Available info: bank, country, card types, phone numbers (more by request)

Visit BinDbShop dot com for Demo.

fumla
27th December 2008, 21:32
Where do you get your data from ? As far as I know than it isn't allowed to publish such information , at least no bank nor the card association like it!

BINs
27th December 2008, 22:01
i get it from a few reliable sources. yes, they don't like it, but it's legal. if it helps fighting fraud, why not use this info? :-)

fumla
27th December 2008, 22:15
True, but the problem is that you will find allot of reliable sources out there like maxmind and similar, however since the members of Visa or MasterCard are not allowed to give out this information and it is in breach with their TOS then I doubt that those BIN's are up to date.

They change instantly which I think you know, we have had a hard time to get those numbers from reliable sources in the previous company and ended up to build our software around MaxMind, which isn't 100%.

Maybe I'm wrong and maybe it dosen't matter if they are up to date for some people. :)

BINs
28th December 2008, 10:16
maxmind's database is 4 years old :-) their db is absolutely useless

BINs
31st December 2008, 23:52
bump. and happy new year =)

IridiumCorp
9th January 2009, 18:08
BIN range data or IIN Data as it is known now is only released to card scheme member organisations. These include issuing/acquiring banks, MSPs and in some cases ISOs. The reason it is ONLY released in full to Member companies is because of the rate at which new data is added to it. Most of the lists you find from various sources on the Internet are severely dated. What this can lead to is a merchant accepting or declining a transaction based on outdated information which can cause a fraudulent payment and or loss of sale which is bad for everyone in the food chain.

Iridium is an MSP and even the datafiles we get every quarter are out of date by 3 months. BIN/IIN data is very handy for picking out fraud when used in conjunction with other methods like IP geolocation. However the bad guys know all the tricks so unless you have an inhouse house fraud detection system as sophisticated or better that your payment service provider offers I would not recommend trying to learn best implementation methods by trial and error.

My recomendation on this issue is to ask your service provider what checks they do, ie do they include BIN/IIN checks. If they do not then find a provider that does.

If you would like more information on BIN/IIN best practices then feel free to PM me.

dingbat
9th January 2009, 18:12
Can someone tell me what BIN data is?

IridiumCorp
12th January 2009, 10:45
Can someone tell me what BIN data is?

Bank Identification Number - It is the first six digits on a credit/debit card.