Seemingly all other payment processors give BIN information as part of their webhooks and APIs, but Stripe does not.
Is there a reason for this? Different interpretation of PCI compliance?
You can also write much more robust rules using Radar: https://stripe.com/docs/radar/rules. Something like: `Review if :is_disposable_email: and :card_funding: = 'prepaid'`