Card Issuing

What Is Card Issuing?

Card issuing is the end-to-end process of creating and distributing payment cards to consumers or businesses. It encompasses everything from obtaining a Bank Identification Number (BIN) and setting up a card program, to personalizing individual cards with cardholder data, to delivering those cards physically or provisioning them digitally. The party responsible for issuing a card is called the issuer, and that entity bears ultimate liability for the funds loaded onto or credited to the card.

Historically, only banks with direct membership in card networks like Visa or Mastercard could issue cards. Today, a layered ecosystem of BIN sponsors, program managers, and issuer processors allows fintechs and non-bank companies to launch card products without obtaining their own banking charter. This unbundling has driven explosive growth in embedded finance, enabling companies from neobanks to crypto exchanges to offer branded payment cards through API-driven platforms.

How It Works

Card issuing operates within the four-party model that underpins modern card payments: the cardholder, the merchant, the acquirer (merchant's bank), and the issuer (cardholder's bank). The issuer's role is to approve or decline transactions in real time, fund the settlement, and manage the cardholder relationship.

Key Roles in Card Issuing

Modern card programs typically involve several specialized parties working together:

• BIN sponsor: a principal member of a card network (Visa, Mastercard) that holds the issuing license and lends its BIN range to the program. The BIN sponsor bears regulatory responsibility and must be a licensed financial institution.
• Program manager: manages the day-to-day operations of the card program, including customer onboarding, KYC/AML compliance, fraud monitoring, dispute resolution, and cardholder support. The program manager defines the product: spend limits, reward structures, and fee schedules.
• Issuer processor: provides the technical infrastructure that connects the card program to the card network. The processor handles authorization requests, transaction routing, settlement files, and maintains the ledger of cardholder balances. Platforms like Marqeta, Lithic, and Stripe Issuing serve this role.
• Card manufacturer: for physical cards, a certified manufacturer produces the plastic, encodes the EMV chip and magnetic stripe, prints cardholder details, and ships the finished card. Companies like IDEMIA and Thales operate in this space.

The Issuing Process

Launching a card program follows a structured sequence:

1. Program design: the fintech or company defines the card product type (debit, prepaid, or credit), target market, funding model, and fee structure
2. BIN acquisition: the program secures a BIN range, either by becoming a network principal member (capital-intensive) or partnering with a BIN sponsor that already holds membership
3. Processor integration: the program integrates with an issuer processor via API to handle authorization, clearing, and settlement
4. Compliance setup: KYC/AML programs, PCI DSS certification, and card network compliance reviews are completed
5. Card personalization: individual cards are created with unique card numbers (PANs), expiration dates, and CVVs tied to cardholder accounts
6. Distribution: cards are delivered physically via mail, issued instantly in-branch, or provisioned digitally into mobile wallets

Authorization Flow

When a cardholder makes a purchase, the issuer processor receives an authorization request from the card network in milliseconds. The processor evaluates the request against the cardholder's balance, spending limits, fraud rules, and any custom logic defined by the program manager. Modern platforms expose this decision point through webhook-based APIs, allowing programs to apply real-time controls:

// Example: real-time authorization webhook
POST /webhooks/authorization
{
  "card_id": "card_8xK2mP",
  "amount": 4250,
  "currency": "USD",
  "merchant": {
    "name": "Coffee Shop",
    "mcc": "5814",
    "country": "US"
  },
  "balance_available": 15000
}

// Response: approve or decline
{
  "approved": true,
  "reason": "sufficient_balance"
}

Virtual vs. Physical Card Issuance

Card issuing takes two primary forms, each suited to different use cases:

Physical Cards

Physical cards contain an EMV chip, NFC antenna for contactless payments, and optionally a magnetic stripe for legacy terminals. Manufacturing requires certified facilities that meet card network security standards. The typical timeline from order to delivery is 7 to 14 business days, though instant issuance kiosks in bank branches can produce cards on-site in minutes.

Virtual Cards

A virtual card is a card number (PAN, expiry, CVV) generated programmatically and delivered digitally. Virtual cards can be provisioned in seconds via API, making them ideal for card-not-present transactions, subscription management, and expense control. They can be single-use (one transaction, then discarded) or multi-use with configurable spend limits and merchant restrictions.

Virtual cards can also be tokenized and pushed to digital wallets like Apple Pay and Google Pay through a process called push provisioning. This bridges the gap between virtual and physical: a card that exists only as data can be used for contactless in-store payments via a phone or wearable.

Tokenization

Network tokenization replaces the actual card number with a device-specific or merchant-specific token issued by the card network. Even if a token is intercepted, it cannot be used outside its designated context. Tokenized cards stored in digital wallets benefit from lower fraud rates and often receive preferential interchange rates from networks as an incentive for adoption.

Crypto Card Issuing

Crypto companies use card issuing programs to bridge digital assets and traditional payment rails. A crypto card lets users spend cryptocurrency or stablecoin balances at any merchant that accepts Visa or Mastercard, with the conversion from crypto to fiat happening behind the scenes.

There are two primary funding models for crypto cards:

• Pre-funded: users manually sell crypto and load a fiat balance onto the card before spending. The conversion happens ahead of time, and the card operates like a standard prepaid card.
• Real-time auto-convert: the card is linked to a live crypto or stablecoin balance. When the cardholder taps to pay, the issuer receives the authorization request, the platform sells the required amount of crypto at the current market rate (plus a spread), and the converted fiat funds the transaction.

Both models require a BIN sponsor relationship and an issuer processor that can interface with the crypto platform's wallets and exchange engine. The interchange fee earned on each transaction often funds the crypto cashback rewards that many crypto cards offer.

For stablecoin-native platforms, card issuing provides a critical off-ramp: users holding USDC, USDT, or other dollar stablecoins can spend them directly at millions of merchants worldwide without first withdrawing to a bank account. This is especially valuable in regions with limited banking access, where a stablecoin-funded card can serve as a primary spending tool.

Modern Card Issuing Platforms

API-driven issuer processors have transformed card issuing from a multi-month bank integration into something a developer can prototype in days. The major platforms include:

These platforms handle the processor role in the card issuing stack, providing APIs for card creation, authorization webhooks, transaction history, dispute management, and settlement reporting. Most partner with one or more BIN sponsors, simplifying the process for fintechs that want to launch a card program without securing their own banking relationship.

Why It Matters

Card issuing sits at the intersection of embedded finance and the broader payments ecosystem. As more companies embed financial services into their platforms, card issuing becomes the bridge between digital value (whether fiat balances, loyalty points, or cryptocurrency) and the real-world spending infrastructure that consumers already use.

For the crypto and stablecoin ecosystem, card issuing solves the "last mile" problem. Holding stablecoins is only useful if you can spend them. By connecting stablecoin wallets to card networks, issuers create a seamless bridge between on-chain value and the 100+ million merchant locations that accept card payments globally. Platforms like Spark that facilitate dollar stablecoin payments on Bitcoin can benefit from card issuing integrations as an additional off-ramp channel for users.

The modern card issuing market is projected to grow at a compound annual rate of roughly 19% through the late 2020s, driven by banking-as-a-service adoption, virtual card proliferation for B2B payments, and crypto card demand in emerging markets. For a deeper look at how crypto cards fit into the broader payments landscape, see our crypto debit cards market overview.

Risks and Considerations

Regulatory Complexity

Card issuing is heavily regulated. The BIN sponsor holds the banking license and bears regulatory liability, but program managers must still comply with KYC/AML requirements, PCI DSS data security standards, and card network operating rules. In the EU, card issuers must hold an e-money license or partner with a licensed institution. In the US, state-level money transmitter licensing may apply depending on the program structure.

BIN Sponsor Concentration Risk

Many fintech card programs rely on a small number of BIN sponsors. Regulatory actions against a sponsor bank can disrupt all programs under its umbrella. Several high-profile cases in 2023 and 2024 saw sponsor banks receive consent orders from regulators, forcing their fintech partners to pause card issuance or migrate to new sponsors on short timelines.

Fraud and Dispute Liability

The issuer bears liability for unauthorized transactions under card network rules and consumer protection laws. For crypto card programs, the irreversibility of on-chain transactions creates tension with the chargeback rights that cardholders expect. If a cardholder disputes a transaction after the underlying crypto has already been sold, the program must absorb the loss. Effective fraud scoring and transaction monitoring are essential to managing this risk.

Interchange Economics

Card programs earn revenue primarily through interchange fees: a percentage of each transaction paid by the merchant's acquirer to the issuer. However, regulations like the Durbin Amendment in the US cap interchange for large issuers, and the economics can be thin for prepaid programs. Programs must carefully model whether interchange revenue covers BIN sponsorship fees, processor costs, compliance overhead, and any rewards or cashback offered to cardholders.

This glossary entry is for informational purposes only and does not constitute financial or investment advice. Always do your own research before using any protocol or technology.