BIN sponsorship in the UK and EU in 2026: who is licensed, who is taking new programs, and how to shortlist

A Bank Identification Number (BIN) is the first 6–8 digits of every payment card. It identifies the issuer that carries the licence, the regulatory responsibility and the settlement obligation for every transaction made on that card. Only principal members of Visa, Mastercard, American Express or Discover — and, in some markets, domestic schemes such as BankAxept — can hold BINs.

BIN sponsorship is a commercial arrangement where a licensed principal member allocates a BIN range to your program and lets you issue cards under its regulatory umbrella. You get to launch a branded card without being an authorised bank or EMI yourself. The sponsor keeps the scheme membership, the regulatory reporting, the AML ownership and, ultimately, the liability for what happens on the cards.

What BIN sponsorship is not: it is not a shortcut around regulation, it is not a substitute for your own AML and financial-crime controls, and it is not a one-signature deal. A serious sponsor will run a full onboarding: business model review, target customer analysis, funds flow diagrams, AML/KYC policy review, sanctions and PEP procedures, wind-down plan, and a stress test of your projected volumes against their capacity.

In the UK, BIN sponsorship is carried out by two types of institutions authorised by the Financial Conduct Authority (FCA):

• Authorised electronic money institutions (EMIs) with principal membership of Visa and/or Mastercard. This is by far the largest group. The FCA register lists dozens of authorised EMIs but only a subset are principal scheme members with active BIN sponsorship desks.
• Banks with principal scheme membership. Banks can sponsor but generally focus on internal programs and large enterprise clients; onboarding times are longer and minimums are higher.

A useful filter: check the FCA Financial Services Register for the entity's permissions (look for "issuing electronic money"), then confirm principal membership by asking the sponsor for their Visa and Mastercard principal ID or a scheme compliance letter. Small-payment-institution registrations and API/AISP-only authorisations are not sufficient — they cannot sponsor card programs.

Post-Brexit reality: a UK-authorised EMI cannot passport into the EU. If you want to issue cards to EU customers on a UK sponsor's BIN, you either accept the geographic limitation, or you need a separate EU-authorised sponsor. Some groups (Modulr, Wise, Paynetics, Contis/Solaris, Enfuce) operate parallel UK and EU licences to solve exactly this problem.

In the EU, BIN sponsors are usually electronic money institutions authorised under the Second E-Money Directive (EMD2) or credit institutions authorised under CRD. Both need principal scheme membership on top of the regulatory licence. Common home regulators for active EU BIN sponsors include:

• Lithuania (Bank of Lithuania) — the single biggest hub of EU EMIs since 2018, with many sponsors offering EEA passporting. Concentration risk is real here — one supervisory action against a major EMI can freeze programs across the continent.
• Ireland (Central Bank of Ireland) — home to several enterprise-tier sponsors serving large fintechs and international corporates.
• Finland (FIN-FSA) — a small but credible cluster (Enfuce, for example) with a compliance-first reputation.
• Netherlands (DNB), Germany (BaFin), France (ACPR), Spain (Bank of Spain), Sweden (Finansinspektionen) — smaller pools of licensed EMIs, but with active players and, in some cases, stronger local acceptance.

Passporting works both ways: an EMI licensed in one EEA member state can sponsor programs distributed across the EEA. But scheme rules, local AML expectations (particularly under MLD5/MLD6 and the incoming AMLR), and local card-scheme domestic rules still apply. Ask any prospective sponsor which member states they actively support, not just where they can theoretically passport.

The single biggest mistake founders make is treating "licensed" as a green light. After a decade of reviewing BIN sponsor selection cycles inside Nordic and EEA fintechs, these five gates filter out roughly 80% of candidates in the first 30 minutes.

1. Scheme membership tier. Principal member of the schemes you need (Visa, Mastercard, and — if relevant — Amex/Discover)? Ask for their principal ID and the date it was granted. Recent principal membership without a track record is a yellow flag.
2. Active onboarding in your segment. Are they currently onboarding programs in your vertical (consumer prepaid, expense management, gig payouts, gaming, crypto-adjacent, embedded finance, corporate cards, gift/incentive)? Many EMIs have quietly closed the door to entire verticals — crypto, gambling, adult, high-risk merchant categories, sometimes even consumer prepaid — without updating their websites.
3. Program-type fit. Prepaid vs debit vs credit, physical vs virtual, multi-currency, contactless, tokenised (Apple Pay / Google Pay from day one?), chargeback handling model. Some sponsors are purely virtual-card shops.
4. AML and financial-crime maturity. Who owns the AML programme — you, them, or shared? What tooling do they mandate (Comply Advantage, Refinitiv, in-house)? How do they handle transaction monitoring alerts on your program? Have they had recent supervisory action, Section 166, or scheme risk-review letters? Reputational contagion is real.
5. Settlement and BIN economics. Interchange share (in the EEA the regulated caps still apply: 0.20% debit / 0.30% credit consumer), scheme fees passed through, sponsorship monthly fee, per-BIN allocation cost, per-card fees, transaction fees, FX margin, settlement cycle and settlement account arrangement (segregated safeguarding account with a credit institution — not held by the EMI on your behalf, however tempting).

• "We can get you live in 6 weeks." Not on a serious sponsor's own BIN. This usually means you are being sold a program-manager slot on someone else's stack — fine if you know that is what you are buying, catastrophic if you don't.
• Reluctance to name their sponsor bank / EMI in writing. If the company you are talking to is a program manager riding on another entity's BIN, you need to know who that entity is and their financial health. A refusal to disclose is a refusal to be diligenced.
• No named AML officer or MLRO on the call by round two. If commercial can't get compliance in the room quickly, compliance is either understaffed or will veto you late in the process.
• Vague answers on safeguarding. Client money in an EU EMI must be safeguarded — either segregated in a credit institution or covered by an insurance policy or bank guarantee. There are no other legal options. If the sponsor cannot explain in one sentence which method they use and at which bank, walk.
• No wind-down plan when asked. Regulators expect one; you should too. If your sponsor loses its licence or exits the market, what happens to your cardholders, funds and BIN?

From first call to first card issued to a real cardholder, plan for 4–9 months on a new BIN with a serious sponsor. Rough breakdown:

• Weeks 1–3: Commercial fit, NDA, indicative economics, shortlisting.
• Weeks 4–10: Full application — business plan, funds-flow diagrams, AML/KYC policies, sanctions procedures, target market analysis, financial projections, wind-down plan, key-personnel disclosures.
• Weeks 8–16: Compliance and risk review by the sponsor, sometimes a parallel review by the sponsor's own bank, scheme notification, BIN allocation.
• Weeks 12–24: Technical integration (card management system, processor, KYC provider, transaction monitoring, chargebacks), scheme certification, security testing (PCI DSS scope), UAT.
• Weeks 20–36: Pilot with a small closed group, real transactions, adjustments, then general availability.

Program-manager platforms (Marqeta, Enfuce, Paynetics, Modulr, Weavr, Solaris, Toqio, Swan and similar) can compress the technical portion significantly by pre-integrating processor + sponsor + tooling — but the compliance and scheme timelines do not compress meaningfully.

1. Are you a principal member of Visa and Mastercard? Please share your principal IDs.
2. Which regulator authorises you and under which permissions (EMI, credit institution)?
3. How many active card programs do you currently sponsor, and how many did you onboard in the last 12 months?
4. Which verticals have you paused or exited in the last 24 months, and why?
5. What is your safeguarding arrangement — method, bank, and the last date the arrangement was reviewed?
6. Who owns AML and transaction monitoring for programs on your BIN — us, you, or shared? What tooling is mandated?
7. What is your process when a scheme (Visa/Mastercard) or your regulator raises a concern about one of your programs?
8. Can we speak to two reference clients in our vertical who have gone live on your BIN in the last 18 months?
9. What is the wind-down plan if you exit the market or lose your licence?
10. Please provide indicative economics for our projected 12-month volumes: per-card, per-transaction, interchange share, scheme fee pass-through, FX, and any minimums.

Our directory tags every profiled partner with their commercial capability, home regulator, licence type and target customer segment. To build a BIN sponsor shortlist:

1. Start from our card acquiring and issuing providers collection, or filter our directory by country and licence type (EMI or credit institution).
2. Use the 6-step wizard to generate a scored, deterministic shortlist based on your target market, program type, projected volumes and risk appetite.
3. For high-stakes selections, request an expert review — Andréas Hobbelin will personally pressure-test your shortlist against AML and regulatory risk.

Every profile shows the regulator, licence type and date, so you can independently verify authorisation on the FCA register, the EBA EUCLID register, or the relevant national regulator's website in under 60 seconds.