In plain words
Think of a private members’ club that only lets members bring guests. You cannot walk in on your own, but a member can sign you in, vouch for you and take responsibility if you break the rules. A BIN sponsor is that member, and the club is Visa or Mastercard.
To issue payment cards, a company must be a member of a card scheme. Membership needs a licence, capital, technical certification and ongoing scheme fees, which is far too much for a startup. 1 2 So a bank or EMI that already is a member lends you a slice of its card number range. That range starts with its Bank Identification Number (BIN), the first six to eight digits on every card.
The cards carry your brand, but the sponsor is the legal issuer. It answers to the scheme and to its regulator for every card in your programme.
How it works
How a sponsored card programme works
What happens between a customer tapping a card and the payment being approved.
-
1
The sponsor approves your programme
It checks your business, customers, risk controls and card design, and registers the programme with the scheme.
-
2
Cards are issued under the sponsor’s BIN
A card processor creates the card numbers, physical or virtual, from the sponsor’s range and links each one to a customer account.
-
3
Each payment is authorised in real time
The scheme routes the request to the processor, which checks the balance and your rules on limits and merchants, then approves or declines in a fraction of a second.
-
4
The sponsor settles with the scheme
Money moves from the sponsor to the scheme and on to the merchant’s acquirer. Your ledger must match what was settled.
The four roles in a card programme
A card programme is usually a chain of companies. Sometimes one provider plays several roles, but the roles themselves stay the same.
| Role | What it does | Who it usually is |
|---|---|---|
| BIN sponsor (issuer) | Holds the scheme membership and licence, owns the BIN range, carries the scheme and regulatory responsibility, and settles with the scheme | A bank or EMI that is a principal member of Visa or Mastercard |
| Program manager | Designs and runs the programme: onboarding, card ordering, fraud rules, disputes, reporting to the sponsor | A specialist firm, the BaaS provider, or the brand itself once it is experienced |
| Card processor | Runs the technology: card numbers, authorisations, tokens for mobile wallets, transaction files | A specialist processing company connected to the schemes |
| Brand | Owns the customer, the app and the experience | Your neobank, wallet or business |
Card scheme rules require that card data is handled to the PCI DSS standard, so the processor and anyone else that touches full card numbers must comply. 3 Most brands avoid touching card numbers at all, which keeps their own compliance much lighter.
BIN sponsor vs BaaS
Founders often use the two terms as if they meant the same thing. They overlap, but they answer different questions.
| BIN sponsor | BaaS provider | |
|---|---|---|
| What you get | The right to issue cards | Accounts, account numbers, transfers, and often cards |
| Where the money sits | With the sponsor, or with an account provider you bring | With the BaaS provider |
| Integration | Through a processor and often a program manager | Usually one set of APIs |
| Best for | Card-first products, or teams that already have accounts elsewhere | Teams that want accounts and cards from one partner |
Many BaaS providers are BIN sponsors themselves, or resell one. Read choosing your partner stack for a neobank MVP for how to combine them.
What a BIN sponsor will check before saying yes
A sponsor puts its own scheme membership on the line for your programme, so its due diligence is thorough. Expect questions in four areas.
Business model
Who your customers are, which countries they live in, what they will spend on, and how you make money from the card.
Financial crime controls
Your KYC flow, transaction monitoring, sanctions checks and who reviews alerts.
Funding and volumes
Forecast card numbers and spend, how card balances are funded, and whether you can pay minimum fees while volumes grow.
Operations
How you handle disputes, lost cards, complaints and daily reconciliation, and who on your team owns each of them.
BIN sponsorship in the UK, EU and Gulf
The scheme rules are global, but the licence the sponsor needs and the local networks differ.
- United Kingdom. Sponsors are typically EMIs or banks authorised by the FCA. A UK sponsor can issue only to UK customers unless it holds permissions elsewhere.
- European Union. A sponsor licensed in one EEA country can usually issue across the EEA through passporting, so many EU programmes use one sponsor for several markets.
- Gulf. In the UAE and Saudi Arabia, sponsors are banks or licensed payment and stored value firms supervised by the central bank. Saudi Arabia also has its national debit network, mada, which local cards often support. Fewer sponsors serve fintechs, so the search usually takes longer.
Example: a travel card for students
Sara is launching a prepaid card for students studying abroad, sold through universities in the EU.
- Sponsor. She signs with an EU EMI that is a Mastercard principal member and agrees to sponsor her programme across several EEA countries.
- Program manager and processor. The sponsor introduces a program manager and a processor it already works with. Sara’s app connects to the processor’s APIs.
- Approval. The sponsor reviews her fraud rules, KYC flow and card design, then registers the programme with the scheme.
- First payment. A student taps her card in a café. The processor checks the balance and Sara’s merchant rules and approves it in under a second.
- Daily routine. Each day Sara’s team reconciles authorisations, settlements and balances against the sponsor’s files.
Common misconceptions
“With a BIN sponsor, I am the card issuer.”
The sponsor is the legal issuer. You are the brand and, sometimes, the program manager. The sponsor can change your rules or end the programme.
“Cards are a quick add-on once accounts work.”
Card launches need sponsor approval, scheme registration, processor set-up and certification testing. Plan them in months.
“The sponsor handles disputes and fraud.”
The sponsor sets the standards, but the daily work of chargebacks, fraud reviews and customer contact usually falls on the program manager or the brand.
FAQ
What is a BIN sponsor?
A bank or EMI that is a principal member of a card scheme such as Visa or Mastercard and lets another company issue cards under its membership and card number range. The sponsor is the legal issuer of the cards and stays responsible to the scheme.
What does BIN stand for?
Bank Identification Number. It is the first six to eight digits of a card number and tells the card networks which issuer the card belongs to. It is also called the Issuer Identification Number (IIN).
What is the difference between a BIN sponsor and a program manager?
The BIN sponsor holds the scheme membership and the licence and is the legal issuer. The program manager designs and runs the card programme day to day, often for several brands, and sits between the sponsor and the brand.
Is a BIN sponsor the same as BaaS?
Not exactly. A BIN sponsor provides card issuing only. A BaaS provider usually bundles accounts, payments and cards, and often relies on a BIN sponsor, or is one itself, for the card part.
How long does it take to launch a card programme with a BIN sponsor?
Typically several months. Due diligence, programme approval by the sponsor, scheme registration, processor set-up, card design approval and testing all have to happen before the first card is issued.
Can I become a card issuer without a BIN sponsor?
Yes, by becoming a principal member of a card scheme yourself, which needs a suitable licence such as an EMI or banking licence, scheme approval and significant investment. Most fintechs start with a sponsor and consider direct membership only at scale.
Related terms
Sources
-
1
V
Visa Visa
https://www.visa.com -
2
M
Mastercard Mastercard
https://www.mastercard.com -
3
PS
PCI Security Standards Council PCI Security Standards Council
https://www.pcisecuritystandards.org
