Endpoint
| Method | GET |
| URL | https://cardbincheck.com/api/bin/{bin} |
| Auth | None - no API key required |
| Rate limit | 500 requests / day / IP (see X-RateLimit-Remaining header) |
| CORS | Access-Control-Allow-Origin: * - call it straight from the browser |
| Caching | Responses are cacheable for 24h (Cache-Control: max-age=86400) |
Example Request
Look up the BIN 424242:
| curl | curl https://cardbincheck.com/api/bin/424242 |
| JavaScript | const r = await fetch('https://cardbincheck.com/api/bin/424242').then(r => r.json()); |
| PHP | $r = json_decode(file_get_contents('https://cardbincheck.com/api/bin/424242'), true); |
| Python | r = requests.get('https://cardbincheck.com/api/bin/424242').json() |
Example Response
A successful lookup returns 200 OK with:
| Field | Type | Description |
|---|---|---|
success | boolean | true when the BIN was found |
data.bin | string | The matched BIN (longest dataset prefix of your input) |
data.scheme | string | Card network - Visa, Mastercard, American Express, … |
data.funding | string | Credit, Debit, Prepaid, or Charge Card |
data.segment | string | Card product segment - Classic, Gold, Platinum, Business, … |
data.issuer | string | Issuing bank / financial institution |
data.country_code | string | ISO 3166-1 alpha-2 country code |
data.country_name | string | Country of issue |
data.bank_url | string | Issuer website (when available) |
data.bank_phone | string | Issuer customer-service phone (when available) |
page | string | Human-readable page for this BIN on cardbincheck.com |
Errors use standard status codes: 400 invalid BIN format, 404 BIN not in the dataset, 429 daily limit reached.
Fair Use
- 500 requests per day per IP - enough for most integrations when combined with caching.
- Cache responses on your side (they rarely change); this effectively multiplies your quota.
- A link back to cardbincheck.com is appreciated but not required.
- Only the first 6-8 digits are ever processed. Never send full card numbers to any API.
Frequently Asked Questions
Is the BIN lookup API really free?
Yes. No API key, no registration, no credit card. Each IP can make up to 500 requests per day, and CORS is enabled for direct browser use.
Where does the data come from?
An open, regularly refreshed dataset of 343,000+ BIN records covering all major card networks and virtually every country.
Can I use it in production?
Yes, within fair use. Responses are cacheable for 24 hours - cache on your side and the daily limit goes a long way.