Launching a Card Programme: From BIN Sponsorship to Live Issued Cards

The Anatomy of a Card Programme

A payment card programme — whether debit, prepaid, or credit — involves a chain of regulated and commercial relationships that must be established before a single card can be issued. The complexity is frequently underestimated by fintech founders who view card issuance as a simple product feature rather than a multi-party regulated infrastructure project.

Understanding the full chain, from card network membership to the physical or virtual card in the customer's hand, is essential for realistic planning.

The Key Participants

Card Network

Visa and Mastercard dominate global card issuance. Each network operates a membership system with strict rules governing who can issue cards bearing their brand. Key network selection considerations include:

• Geographic coverage: Both networks offer global acceptance, but specific corridors may favour one over the other
• Programme approval requirements: Each network has distinct requirements for new card programmes
• Interchange rates: These vary by card type, transaction type, and region (regulated in the EEA by the Interchange Fee Regulation (EU) 2015/751)
• Technology requirements: Tokenisation, 3DS2 (Strong Customer Authentication), and contactless capabilities

In the EEA, interchange fees are capped at 0.2% for debit cards and 0.3% for credit cards under Regulation (EU) 2015/751. This directly affects the revenue model of any card programme.

BIN Sponsor

A Bank Identification Number (BIN) is the first six to eight digits of a card number, identifying the issuing institution. To issue cards under a Visa or Mastercard BIN, an entity must either:

• Be a principal member of the card network (typically requiring a banking or EMI licence and direct network membership), or
• Operate under a BIN sponsorship arrangement with a principal member

Most fintechs use BIN sponsorship rather than seeking direct membership, which requires significant capital, regulatory status, and processing infrastructure. The BIN sponsor provides:

• Access to the card network under its own membership
• Settlement services for card transactions
• Regulatory compliance oversight (as the network-registered issuer)

Key BIN sponsors active in the European market include Moorwand, Transact Payments, Contis (now part of Solaris), and Paynetics.

Programme Manager

The programme manager is the entity responsible for the day-to-day operation of the card programme. In many fintech card programmes, the fintech itself acts as programme manager, handling:

• Cardholder onboarding and KYC
• Transaction authorisation decisions
• Dispute and chargeback management
• Customer communication
• Spending limits and controls
• Fraud monitoring

The programme manager operates under a programme management agreement with the BIN sponsor, which specifies the compliance standards, reporting obligations, and service levels.

Card Processor

The card processor provides the technology infrastructure for transaction processing:

• Authorisation processing: Receiving and responding to authorisation requests from the card network in real time
• Transaction clearing: Processing settled transactions and generating settlement files
• Cardholder management: Maintaining cardholder records, card status, and balance management
• 3DS2 authentication: Managing Strong Customer Authentication under PSD2
• Tokenisation: Supporting Apple Pay, Google Pay, and other digital wallet provisioning

Leading card processors include GPS (Global Processing Services, now part of PaySign), Marqeta, Enfuce, and Thredd (formerly Wirecard Card Solutions).

Card Fulfilment House

For physical cards, a fulfilment house handles:

• Card production (plastic, metal, or eco-material)
• Personalisation (embossing or printing cardholder name and card number)
• PIN generation and secure mailing
• Packaging and dispatch

For virtual cards, fulfilment is handled digitally through the card processor and mobile application.

The Regulatory Framework

Card issuance is regulated activity. The regulatory requirements depend on the type of card:

Prepaid cards (e-money) Prepaid cards that store value are classified as electronic money under EMD2. The issuer must be a licensed credit institution, EMI, or operate under an EMI's agent or distributor arrangement.

Debit cards Debit cards linked to a payment account require the account provider to be a licensed payment institution, EMI, or credit institution under PSD2.

Credit cards Credit cards involve lending, which typically requires a credit institution licence or authorisation under the Consumer Credit Directive (2008/48/EC) or its successor, the Consumer Credit Directive (EU) 2023/2225.

Strong Customer Authentication (SCA)

Under PSD2 Article 97 and the associated Regulatory Technical Standards (Commission Delegated Regulation (EU) 2018/389), card transactions must be authenticated using at least two of three factors:

• Something the cardholder knows (PIN, password)
• Something the cardholder has (mobile device, physical card)
• Something the cardholder is (biometric — fingerprint, face recognition)

3D Secure 2 (3DS2) is the industry standard for online card transaction authentication. Card programmes must implement 3DS2 to comply with SCA requirements and to benefit from liability shift for authenticated transactions.

Timeline and Process

Phase 1: Planning (Months 1-2)

• Define card programme parameters (prepaid, debit, or credit; physical and/or virtual; currencies; target markets)
• Select card network (Visa or Mastercard)
• Identify BIN sponsor and card processor
• Prepare programme documentation

Phase 2: Commercial Agreements (Months 2-4)

• Negotiate and execute BIN sponsorship agreement
• Execute card processing agreement
• Complete card network programme approval
• Engage card fulfilment house (if physical cards)
• Establish settlement account arrangements

Phase 3: Technical Integration (Months 3-6)

• Integrate with card processor APIs
• Implement authorisation logic and transaction controls
• Build card management features in customer application
• Implement 3DS2 authentication
• Configure digital wallet provisioning (Apple Pay, Google Pay)
• Complete end-to-end testing in sandbox environments

Phase 4: Compliance and Certification (Months 5-7)

• Complete card network compliance certification
• Conduct PCI DSS assessment (if handling card data directly)
• Implement fraud monitoring and chargeback procedures
• Complete BIN sponsor compliance review
• Conduct user acceptance testing

Phase 5: Launch (Months 7-9)

• Soft launch with limited user group
• Monitor transaction patterns and error rates
• Scale up to full launch
• Begin physical card production and fulfilment (if applicable)

Cost Structure

Component	Setup Cost	Ongoing Monthly Cost
BIN sponsorship	£10,000-£30,000	£2,000-£10,000 + per-card fees
Card processing	£20,000-£80,000	£5,000-£20,000 + per-transaction fees
Card network fees	£5,000-£15,000	Variable (scheme fees per transaction)
Card fulfilment (physical)	£5,000-£10,000	£3-£8 per card produced
Virtual card issuance	Included in processing	£0.10-£0.50 per card
3DS2/SCA infrastructure	£5,000-£15,000	£1,000-£3,000
Compliance and certification	£10,000-£30,000	Included in BIN sponsor fees
Total	£55,000-£180,000	£10,000-£35,000 + variable

Per-transaction fees typically range from £0.02-£0.10 for authorisation processing, plus card network scheme fees of approximately £0.01-£0.05 per transaction.

Revenue Model

Card programme revenue derives from:

• Interchange fees: Earned on each card transaction, capped at 0.2% (debit) or 0.3% (credit) in the EEA. The interchange is split between the BIN sponsor and the programme manager according to their commercial agreement
• Card fees: Monthly or annual card fees charged to customers
• Foreign exchange margin: FX markup on cross-currency transactions (typically 1-3%)
• ATM withdrawal fees: Fees for cash withdrawals
• Premium card upsells: Higher-tier cards with additional features (insurance, lounge access)

Key Takeaways

• A card programme involves five key participants: card network, BIN sponsor, programme manager, card processor, and fulfilment house — each requiring separate commercial agreements
• The typical timeline from programme initiation to first issued card is 6-9 months, driven by commercial negotiations, technical integration, and network certification
• Setup costs range from £55,000 to £180,000, with ongoing costs of £10,000-£35,000 per month plus variable per-transaction fees
• Regulatory requirements include EMI or PI licensing (or operation under a licensed BIN sponsor), PSD2 SCA compliance via 3DS2, and EEA interchange fee caps under Regulation (EU) 2015/751
• The choice between physical and virtual cards affects cost, timeline, and customer experience — most programmes launch with virtual cards first and add physical cards subsequently
• BIN sponsorship is the standard route for fintechs; direct card network membership is only justified at very high card volumes (typically 500,000+ active cards)
• Revenue is primarily interchange-driven in the EEA, meaning FX margins and premium card tiers are essential for sustainable economics