The Anatomy of a Credit Card: What Every Millimetre and Every Digit Actually Means

Pull a credit card out of your wallet. It is a rectangle of PVC that has not meaningfully changed shape since the 1980s, carrying a number whose error-checking maths was patented before the transistor computer was commonplace. Almost every element of it is specified by an international standard, and almost none of those specifications are widely known — including by the people who repeat the most popular claim about the card's proportions, which is wrong.

Here is what the object actually is.

The format: 85.60 × 53.98 mm, and it started in inches

The card in your hand is an ID-1 card, the format defined by ISO/IEC 7810 — the standard for the physical characteristics of identification cards, current edition 2019. ID-1 specifies:

The oddly precise millimetre figures are a giveaway: they are conversions. The format was originally drawn in imperial units at 3⅜ inches by 2⅛ inches, and the metric numbers in the modern standard are what those inches become when you convert them. That is why the card is 53.98 mm tall rather than a round 54.

ID-1 is not only a payment format. The same rectangle is used for driving licences, national identity cards, transit passes and aircrew certificates. It is also where the SIM card comes from: the original full-size SIM was itself an ID-1 card, with the small chip module punched out of the middle of it — which is why the first SIMs you had to snap out of a credit-card-sized piece of plastic looked like that.

A note on sourcing. ISO's own catalogue pages sit behind a bot challenge and could not be fetched directly for this article. The dimensions above are taken from the reference documentation of ISO/IEC 7810, which cites the standard's clauses, rather than from the paid standard itself. We flag that rather than pretend to a primary source we did not read.

The claim that will not die: no, it is not a golden rectangle

You have almost certainly seen the assertion that a credit card is a golden rectangle — a shape whose sides are in the ratio φ ≈ 1.61803, the proportion that turns up in design folklore from the Parthenon to the Apple logo. It appears in design courses, in maths-appreciation articles and on sites devoted to the golden ratio.

It is straightforwardly false, and you can check it in one division.

• Using the ISO metric dimensions: 85.60 ÷ 53.98 = 1.58577
• Using the original imperial spec (27/17): 1.58824
• The golden ratio: 1.61803

The card is roughly 2% short of golden. That is not a rounding artefact; it is a different rectangle. Whatever governed the choice of 3⅜ × 2⅛ inches — wallet dimensions, the reach of a fingertip, the size of an imprinter plate — it was not φ.

The mathematics writer Rob Eastaway worked through exactly this in 2014, measuring his own card and then checking it against the official inch specification. His conclusion: "It might be close to the golden ratio, but it's certainly not the same." He also disposes of the broader claim the myth rests on, that people instinctively prefer golden rectangles: "it's an urban myth that most people choose the golden rectangle ahead of other rectangular shapes."

The persistence of the claim is itself interesting. It survives because 1.586 and 1.618 look similar, because nobody checks, and because "the card in your pocket is secretly the divine proportion" is a much better story than "the card in your pocket is 3⅜ inches wide."

The first digit tells you what industry issued it

The number on the front is governed by a different standard, ISO/IEC 7812, first published in 1989. It splits the Primary Account Number into an Issuer Identification Number (IIN), an individual account identifier, and a single check digit.

The very first digit is the Major Industry Identifier, and it encodes the sector the issuer belongs to:

This is why the networks sit where they do. Visa is 4 — banking. Mastercard is 5, the second banking block. American Express is 34 and 37 — travel and entertainment, which is exactly what Amex was when the ranges were allocated. Discover sits at 6011 and 65, in the merchandising block, a fossil of its origin as a retailer's card. China UnionPay is 62. The digit is a historical record of what kind of company the issuer was.

Mastercard later ran out of room in the 5-block. It announced an additional range beginning with 2 in November 2014, and the 222100–272099 range went live on 14 October 2016. If you have ever seen a Mastercard starting with a 2 and assumed it was a typo, that is why.

The IIN quietly got longer, and most people missed it

For decades the IIN was six digits. It is now eight. The 2017 revision of ISO/IEC 7812-1 defined the longer identifier, and the card networks set a common industry date: Visa's own published guidance states that "Visa has set April 2022 as its deadline for acquirers and processors to be ready to work with eight-digit BINs in compliance with the new International Organization for Standardization standard," and Mastercard adopted the same 1 April 2022 date.

Two practical consequences follow, and both matter more than they sound:

• Six- and eight-digit IINs coexist. Visa's guidance is explicit that both will exist after the deadline. Any system that assumes "the first six digits identify the issuer" is now sometimes wrong.
• The card number did not get longer. Even with an eight-digit IIN, the maximum length of the account number remains 19 digits. The extra IIN digits came out of the account-identifier space, not out of the total.

Registration of these identifiers is administered by the American Bankers Association as the ISO registration authority, with day-to-day administration handled on its behalf by CUSIP Global Services since February 2024.

The last digit is arithmetic from 1954

The final digit of your card number is not part of your account. It is a check digit, computed from all the digits before it, and it exists so that a mistyped number fails immediately rather than being routed somewhere expensive.

The method is the Luhn algorithm, and its provenance is unusually crisp. It is US patent 2,950,048, "Computer for Verifying Numbers", inventor Hans P. Luhn of Armonk, New York, assigned to International Business Machines Corporation. It was filed on 6 January 1954 and granted on 23 August 1960. Luhn was one of the founding figures of information retrieval; the check digit is a footnote in his career that ended up on several billion pieces of plastic.

The algorithm is in the public domain and is specified in Annex B of ISO/IEC 7812-1. It works by doubling every second digit from the right, subtracting 9 from any result above 9, summing everything including the check digit, and requiring the total to be divisible by 10. You can do it on paper.

What matters is what it is for, and what it is emphatically not. In the words of the algorithm's own reference documentation: "It is not intended to be a cryptographically secure hash function; it was designed to protect against accidental errors, not malicious attacks."

Its coverage is also specific and slightly imperfect: it detects all single-digit errors and almost all transpositions of adjacent digits — but it will not catch a swap of 09 ↔ 90, nor 22 ↔ 55, 33 ↔ 66 or 44 ↔ 77. Four transpositions in the whole space slip through. A number that passes the Luhn check is therefore a well-formed number, not a real one, and certainly not a valid one: it says nothing about whether the account exists, has funds, or belongs to the person typing it.

That distinction is the entire reason online forms can reject a card instantly without contacting your bank, and also why "it passed validation" means considerably less than people assume.

The parts that are disappearing

Two features of the classic card are on published retirement schedules.

The raised digits exist because of the imprinter — the mechanical device that pressed the card's embossing through carbon paper to make a physical sales slip. Mastercard's own account of the era records that these machines were "dubbed 'knuckle-busters' by the unfortunate clerks who skinned their fingers on the embossing plate." Embossing has been steadily replaced by flat printing, though we could not locate any network announcement formally dropping the requirement, so we are not claiming one exists.

The signature panel is a different story, and here there is a dated announcement. Mastercard stated in October 2018 that "Starting in April 2019, Mastercard issuers globally will no longer be required to include a signature panel on the back of Mastercard products."

The magnetic stripe has the clearest timeline of all. It was invented by IBM engineer Forrest Parry in the early 1960s, and IBM's own history records the moment the problem was solved: Parry could not get the tape to adhere to the plastic until "his wife, who happened to be ironing clothing at the time, suggested that he use the iron to melt the stripe onto the card. It worked."

Mastercard has published the end date. Its schedule: the stripe begins disappearing from cards in some regions from 2024; US banks are no longer required to issue chip cards with a stripe from 2027; "By 2029, no new Mastercard credit or debit cards will be issued with a magnetic stripe"; and "By 2033, no Mastercard credit and debit cards will have magnetic stripes."

A woman's clothes iron in the early 1960s, retired by 2033. That is roughly seventy years of service for a piece of recording tape.

What this is actually useful for

Beyond the pleasure of knowing it, the structure has a few practical consequences.

• The first digits identify the network, not your bank's country. A common assumption when a payment is declined abroad is that the card "looks foreign" to the merchant. The IIN identifies the issuer, and the routing and currency behaviour that follow from it are what actually drive foreign-transaction costs — which you can model against a real transaction using our foreign spending cost calculator and read about in no foreign transaction fee credit cards.
• A "valid-looking" number is not a validated card. The Luhn check is a typo filter. That gap is part of why merchant-locked and single-use numbers exist at all — covered separately in virtual card numbers explained.
• Format is not product. Every card in the premium tier, every crypto-linked card and every entry-level card issued through a standard card application is the same 85.60 × 53.98 mm ID-1 rectangle running the same 1954 arithmetic. What differs is the contract behind it — the pricing, the rewards structure and the protections — never the plastic.

More on cross-border card mechanics in our International Cards section.

This article is general information about payment card standards, not financial advice. Card terms, fees and network rules vary by issuer and by country and change over time; check the current terms with your own issuer. Figures are stated as at July 2026.