How does bank-card enrichment work?

Stixify
1

In this report a list of card numbers was uploaded;

image
image1771×867 185 KB

One of the card numbers 4242424242424242 is then converted into

  • an indicator object
  • a bank-card object
  • linked to an issuer (STRIPE PAYMENTS UK, LTD. (GB))
  • linked to a location (United Kingdom of Great Britain and Northern Ireland)

How is Stixify getting issuer info?

2

I’ve done a short write up about how this works in this post

The tl;dr version

The first 6 or 8 digits of a payment card number cards, debit cards, etc.) are known as the Issuer Identification Numbers (IIN), previously known as Bank Identification Number (BIN). These identify the institution that issued the card to the card holder.

For example, 531903 identifies the card as a MasterCard issued in the United States by the bank, Jack Henry & Associates.

Stixify uses a third-party service (https://binlist.net/) to get issuer and location info which is then processed into STIX objects / STIX relationships.