Ask HN: How companies have a BIN vulnerability?

Many companies have some BINs where you can enter any fake credit card and it just works for premium accounts, I want to know how this works ?