What WePay partners need to know about MasterCard’s new BIN range
If you pull out any MasterCard card in your wallet, you’ll notice the 16-digit number on the front begins with a “5”.
This “5” is part of MasterCard’s Bank Identification Number or BIN. A BIN represents the first four to six digits on a credit card and is often used to identify the bank that issued the card. Banks that issue MasterCard have traditionally used a BIN ranging from 510000 – 559999, but after January 2017 this will no longer be the case.
MasterCard has announced that they will support a new BIN range, 222100-272099, to be processed with and in the same manner as the existing BIN range 510000-559999. This means that you’ll start to see new cards issued next year that begin with “2” in addition to those that begin with “5”.
Effective January 1, 2017, all entities that facilitate transactions, including WePay platform customers, will need to update their systems to accept cards of both BIN ranges. We’ve outlined everything you need to know to comply with this new MasterCard requirement. Read on to learn about what you’ll need to do to accept these new cards on your platform.
How do these requirements impact my platform?
The action that you take depends on the nature of your integration with WePay.
If you are using WePay’s iframe checkout and do not collect or store credit card credentials directly, then you are covered. Even so, we recommend performing an end-to-end test once WePay’s system has been updated to ensure your system can facilitate payments made using MasterCard cards starting with “2”.
If you are using WePay’s custom checkout and collecting credit card credentials directly from the customer, you’ll need to make a few more changes to areas of your website where you:
- Validate the authenticity of cards based on their 16-digit numbers
- Infer the card brand based on the first digit of the card number
In both of these cases, you’ll need to enhance your validation practices to support 16-digit card numbers that begin with “2” and/or recognize such card numbers as MasterCard cards.
Changes are generally required on any web page where you collect and validate a customer’s credit card credentials. We recommend performing end-to-end testing of your system to identify all the areas where you will need to make updates.
Anything else I should be aware of?
All WePay platform customers must comply with this new MasterCard requirement by January 1, 2017.
You will be able to test and validate your changes using test card numbers 2223000048400011 or 2223520043560014 once we update our systems by October 15, 2016. We will send periodic communications once we’ve updated our systems to guide your efforts.
Please reach out to your account manager if you have any additional questions.