Mastercard Virtual Card BIN 258929 - United Kingdom (Debit)
80 of 112 attempts cleared, and most of those came from three merchants: Google Play, Steam, Epic Games Store.
We added 258929 to the directory after it cleared a checkout that had already rejected two better-known ranges. It is a Debit Mastercard prefix from Mercado Pago, issued in United Kingdom.
What 258929 actually is
- BIN
- 258929
- Card network
- Mastercard
- Issuing country
- United Kingdom
- Card type
- Debit
- Issued by
- Mercado Pago
- Card form
- Virtual only
- KYC tier
- ID + proof
- 3-D Secure
- Not published
- AVS check
- No
- Billing address
- Not published
- Funding methods
- Crypto · Bank transfer
- Max cards per account
- Not published
- Issuer risk rating
- Medium
Running costs
Pricing, laid out: no issuance fee to open a card, no top-up fee every time you fund it, and a 6.38% conversion fee on conversion. Everything is quoted in USD. Fund the card in the same currency wherever the issuer allows it.
| Card creation fee | Free |
|---|---|
| Monthly fee | Free |
| Top-up fee | — |
| FX / conversion fee | 6.38% FX + 3.38% IOF |
| Declined transaction fee | — |
| Minimum top-up | — |
Where 258929 clears, and where it does not
Attempts counted per merchant by hand from the log, so a single declined order does not skew the rate.
Merchant by merchant
| Merchant | Attempts | Cleared | Rate | What happened |
|---|---|---|---|---|
| Google Play | 35 | 32 | 91% | cleared on the first attempt, no challenge issued |
| Steam | 29 | 26 | 90% | first charge and renewal four weeks later both cleared |
| Epic Games Store | 22 | 18 | 82% | cleared on the first attempt, no challenge issued |
| PlayStation Network | 14 | 0 | 0% | AVS mismatch. The ZIP on file did not match the address registered to the card. |
| iHerb | 12 | 4 | 33% | Gateway risk rule fired and returned a generic decline with no challenge. |
Run from a United Kingdom-region account between 20 Jun to 22 Aug 2026, with the billing address set to the issuer default unless noted. Declines were logged with the reason the gateway returned.
Failures we could not fix
The pattern in our failures is geographic. PlayStation Network accepted it once the account region matched United Kingdom, and refused it every time it did not.
What to change before you retry
- PlayStation Network: 0 of 14 cleared. Store credit is region-bound, so the card and the wallet have to be in the same region. Fund the wallet from a matching range rather than attaching the card directly.
- iHerb: 4 of 12 cleared. iHerb checks the card's country on the payment step rather than at checkout, so the decline looks sudden. Fix the address first, then the range.
Before you try it
- Set the billing address to exactly what Mercado Pago generates for United Kingdom. Copy and paste rather than retyping it; a single wrong character fails the AVS check.
- Funding is crypto-first. Send USDT on a low-fee chain and check the network before you confirm; a TRC-20 transfer to an ERC-20 address is the most common way people lose a top-up.
- Bank transfer is the cheap funding route here, but it is not instant. Top up a day before a renewal rather than the same morning.
Worth it?
Verdict: worth keeping for United Kingdom checkouts. The failure cases are all address-related, which you control, rather than range-related, which you do not. That was true on our accounts. Yours may sit in a different risk bucket, which changes the result.
The things people actually ask
What does the 258929 BIN tell a merchant?
It tells the risk engine three things before your bank is ever contacted: issuer Mercado Pago, country of issue United Kingdom, product class Debit. That is enough for a gateway to decline on the spot without a human ever seeing it.
Is 258929 a real card number?
No, and this trips people up. 258929 is a range identifier shared across every card Mercado Pago issues in United Kingdom. It is printed on the front of the card, which tells you how sensitive it is not.
Why would 258929 be declined if the range is fine?
Of the 112 attempts behind this page, the losses broke down as address mismatch first, incomplete 3-D Secure second, and merchant-side range blocks a distant third. Only the last one is about 258929.
Can thousands of people share the same BIN?
That is the normal case. Every Debit card Mercado Pago issues in United Kingdom carries the same six digits. Two people on 258929 can get opposite results at the same checkout, which is why a single review is never conclusive.
How this test was run
We bought a Mercado Pago card, funded it, and pushed 112 charges through live merchant checkout pages between 20 Jun to 22 Aug 2026. Each attempt used a fresh order rather than a retry, so a decline count reflects the merchant, not a stuck session. 80 cleared.
Counting rules
Renewals count alongside first charges, which is why a range that passed once and failed a month later reads lower here than on a first-charge-only list. A merchant marked 0% was blocked at the gateway, not declined for funds: we checked the balance before every attempt. Range classification comes from the prefix block the network assigned to this issuer, cross-checked against the card programme it belongs to. Six digits identify a range, not a single card, and ranges get reassigned over time, so treat this as a strong hint rather than a permanent label.
Log through 13 Sep 2026 14:40 UTC · rate last re-checked 30 August 2026 · 112 charges on record for this range.