Card Data Record Structure
Payment card data is defined by international standards rather than invented per seller. ISO/IEC 7812 defines the record structure and identifier elements; ISO/IEC 7813 defines the magnetic stripe record formats. This reference walks the elements one by one, with formats and lengths, and explains which are PAN-derived and which are cardholder-specific.
What a card data record contains
A payment card record is a set of fields with defined formats. The core identifier is the PAN, which carries an issuer identifier, an account identifier and a check digit. Around it sit cardholder-specific elements such as name, address, date of birth and personal identifiers, each with its own format and length rules.
- The PAN is the primary account number
- Issuer identifier is the leading digits
- Account identifier fills the middle
- A check digit closes the number
- Cardholder elements are separate fields with their own formats
The identifier elements
ISO/IEC 7812 defines the identifier structure. The leading digits identify the issuer through the IIN, which is allocated from a range. The following digits are the account identifier, assigned by the issuer. The final digit is a check digit computed with the Luhn algorithm over everything before it.
- The IIN is allocated as a range by the network
- The account identifier is assigned by the issuer
- The check digit is derived, not chosen
- Length varies by network: 13, 15, 16 or 19 digits
- The structure is standardised across networks
Cardholder-specific elements
Name, address, postal code, date of birth, telephone number and personal identifiers are all carried in cardholder records in formats defined by ISO/IEC 7812 and the relevant national standards. Each has a fixed length, character set and validation rule, which is what makes a record machine-checkable rather than free text.
- Each element has a fixed length and character set
- Postal codes follow the country format
- Dates follow a defined representation
- Personal identifiers are validated by check digit or format
- Validation rules are what make records machine-checkable
Validation and record integrity
A record can be checked end to end. The PAN passes the Luhn checksum, the issuer identifier resolves to a known institution, the card level matches the issuer's catalogue and the cardholder elements satisfy their format rules. Each check is independent and catches different classes of error.
- Luhn validates the PAN structure
- Issuer identifier resolves against a current dataset
- Card level must match the issuer catalogue
- Cardholder elements are format-validated
- Independent checks catch different error classes
Frequently Asked Questions
What is a card data record?
A set of standardised fields: the PAN plus cardholder-specific elements.
What is an IIN?
The issuer identifier at the start of a PAN, allocated to an institution as a range.
How long is a PAN?
13, 15, 16 or 19 digits depending on the network and product.
What is the check digit for?
It is derived from the preceding digits with the Luhn algorithm, so a mistyped number can be detected.
How can a record be validated?
Independently: Luhn on the PAN, issuer lookup, card level against the catalogue, and format checks on each cardholder element.