Issuer

In payments, an issuer is the bank or other licensed institution that provides a payment instrument, most often a card, to a customer and takes responsibility for the transactions made with it. The issuer opens the account, sets the spending limit or holds the funds, decides whether to approve each purchase and pays the merchant's side of the transaction through the card network. In card terminology the word is short for card issuer or issuing bank.

The word has wider meanings in finance. A company that sells shares or bonds is the issuer of those securities, a central bank issues banknotes, and a stablecoin or e-money firm issues the digital units it promises to redeem. In each case the issuer is the party whose promise the holder relies on. This entry concentrates on the payments sense.

Card payments are usually described through the four-party card model. The cardholder and the issuer sit on one side; the merchant and its acquirer sit on the other; the card network connects them. When a cardholder pays, the acquirer sends an authorisation request through the network to the issuer, which checks the card, the available balance or credit and its fraud models before replying. Later, the issuer receives the clearing record, posts the transaction to the cardholder's account and pays the network, which passes funds to the acquirer.

In a three-party card model, such as the traditional American Express arrangement, the network itself acts as issuer and acquirer, so there is no separate issuing bank.

The issuer's main responsibilities fall into a few areas:

• Customer and account. It carries out know-your-customer checks, opens the account, sets credit limits for credit cards and holds the funds for debit and prepaid cards.
• Authorisation. It decides in real time whether to approve each payment authorisation, often using an issuer processor to run the systems.
• Authentication. It verifies that the person paying is the genuine cardholder, through PINs, chip cryptograms or cardholder authentication such as 3-D Secure online.
• Disputes. It handles cardholder complaints and raises chargebacks against the acquirer under the network's rules.
• Card production. It orders physical cards, issues digital or virtual card numbers and manages token requests from mobile wallets.

Issuers earn the interchange fee, which is paid by the acquirer to the issuer on each purchase and set by the card network, subject to regulatory caps in some markets. Credit card issuers also earn interest on revolving balances, along with annual, late payment and foreign transaction fees. Out of this income they fund rewards, fraud losses, credit losses and network fees.

Because interchange is the main revenue on debit and prepaid cards, it is closely watched by regulators. The European Union caps consumer interchange for most cards, and in the United States the Durbin Amendment caps debit interchange for large issuers.

Card networks admit only licensed financial institutions as principal issuing members. These are normally banks, credit unions or, in many countries, electronic money institutions. Each issuer is identified by the leading digits of the card number, the bank identification number (BIN).

Fintech companies that want to offer cards without becoming licensed themselves usually rely on BIN sponsorship: a licensed bank remains the issuer of record, while the fintech designs the product and acts as program manager. The sponsor stays legally responsible for compliance with network rules and banking law.

Large issuers often run their own processing, while smaller banks and credit unions outsource most of it. A single bank may also issue cards on several networks, or place two networks on the same card where the law requires a choice of routing for debit transactions. Whatever the arrangement, the issuer of record is the one named in network registrations and in the cardholder agreement.

Issuers carry credit risk when cardholders fail to repay, fraud risk when stolen card details are used and liability shifts do not move the loss to the merchant, and operational risk from systems that must approve transactions every second of the day. They also carry compliance obligations under anti-money laundering, sanctions and consumer protection law. Under network rules, an issuer that approves a transaction is obliged to pay for it, which is why authorisation decisions are central to issuer risk management. For stablecoin and token issuers, the parallel risk sits in reserves and redemption, discussed under stablecoin issuer.