How to block the ability to pay for purchases with virtual cards?

Question

Payment systems

Is it possible to determine that the card is virtual by the card number? Which payment aggregators can determine that the card is virtual and not skip payments from them if we ask to block the possibility of paying with virtual cards?
In the case of using ordinary bank cards, these cards can be used to identify the person by the police in case of theft of the rental item. If the user enters the data of an anonymous virtual card, it will be impossible to identify the user in case of theft. Therefore, we would like to block the possibility of their use in our service.
Does it make sense to block all virtual cards or are there virtual cards that uniquely identify the owner? For example, Yandex writes "Anonymous users of [virtual cards] cannot pay in foreign online stores. There are no such restrictions for registered and identified account holders." https://money.yandex.ru/doc.xml?id=526088 and offers several identification methods. If the user is identified, will Yandex be able, for example, to provide the police with his data at the request of the court, allowing him to be identified? To issue an anonymous virtual card, a phone number and e-mail are enough. But a verified user provides a bunch of information (TIN, passport) and they are verified.
The card number after identification, of course, does not change. So if we block virtual cards by number, then we lose those who verified their account. Generally speaking, we are ready for this - the only question remains - are there any patterns in the numbers of virtual cards? For example, are the first 6 digits the same or something like that? In general, I suspect that the answer is no - since the Russian Standard, for example, generally makes virtual cards with a convenient number ( www.rsb.ru/cards/virtu_card/) but I would be glad to hear the opinions of experts! Thank you!

Answer 1

Here it is better to look not in the direction of aggregators, but in the direction of processing centers that can receive data about the cardholder, issuing bank, etc.
The first digit of the card is the type (in the Russian Federation 4 - Visa, 5 mastercard, 6 - maestro). The first 6 digits are usually the identification number (IIN) of the issuing bank.
www.stevemorse.org/ssn/List_of_Bank_Identification... is an archived copy of a Wiki article that has now been taken down. From experience - there is a dependence on the region and it is not so easy to get such information in full. At one time I made a cut by clients - it was not always possible to compose the data correctly.
Everything is complicated with virtual cards, because, for example, there are Qiwi and their QVC, etc. and accounts can be. both verified and not. Much more important than 3D-Secure: with it, if the goods are provided, there are no chargebacks, but without it you can "fly in" in full. Although I did not fully understand your business model, maybe. has its bottlenecks.
I never requested such a filter , but from those with whom I worked: PayOnline, Uniteller. Banks now, in general, are the same for everyone, but from antifraud , I would still give at the mercy of the centers and myself . Purely technically, a virtual card is usually indistinguishable from the usual one, therefore, I repeat, when connecting directly in the application, indicate that such filtering is needed. By the way, there is also Paykeeper.
And a few words about rental: if this is rental, then no one forbids (and even vice versa) you to collect Persian. data from the client, so how he will eventually pay - can by itself fade into the background.

Answer 2

Try www.cloudpayments.ru - before paying, you will receive information about all the information about the card: issuer, country, type (debit, credit), category (virtual, electron, classic, etc.), and then make a decision on making a payment.